Security vulnerabilities in Gimp allow code injection with manipulated files like GIFs. There is no update yet.
GIMP has a worthy competitor in the open-source world.