psd-tools vulnerabilities

CVEs whose affected-version data names the psd-tools package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

4 CVEsRSS

CVE-2026-59991High· 7.5PoC

1mo ago

psd-tools is a Python package for working with Adobe Photoshop PSD files

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite() and PSDImage.numpy() allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels…

▾ Midnightpsd-tools · psd-toolsEPSS 0.52%via NVD

CVE-2026-49836Medium· 4.6PoC

1mo ago

psd-tools is a Python package for working with Adobe Photoshop PSD files

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, `SmartObject.save()` writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled …

▾ Twilightpsd-tools · psd-toolsEPSS 0.19%via NVD

CVE-2026-27809Medium

8mo ago

psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

▾ Sunlitpsd-tools · psd-toolsEPSS 0.48%via OSV

CVE-2020-10571Critical· 9.8

6y ago

Potential buffer overflow in psd-tools

▾ Midnightpsd-tools · psd-toolsEPSS 1.8%via OSV