thumbnail Unpatched 15-year old Python bug allows code execution in 350k projects