ag-psd vulnerabilities
CVEs whose affected-version data names the ag-psd package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-63501High· 7.5PoCag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)
ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd() accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit prop…
▾ MidnightAgamnentzar · ag-psdEPSS 0.51%via CVEORG
CVE-2026-62297High· 7.5PoCag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)
ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, `readPsd()` commits image and layer buffers from attacker-declared PSD geometry before va…
▾ MidnightAgamnentzar · ag-psdEPSS 0.34%via CVEORG