PyPI/psd-tools CVE-2026-27809: critical 9.1, EPSS 0.48%

psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

Action: Upgrade psd-tools to 1.12.2 or later.

pip install psd-tools==1.12.2

Affected

Fixed versions

Sources

• osv: GHSA-24p2-j2jr-386w
• nvd: CVE-2026-27809
• https://github.com/psd-tools/psd-tools/security/advisories/GHSA-24p2-j2jr-386w
• https://github.com/psd-tools/psd-tools/commit/6c0a78f195b5942757886a1863793fd5946c1fb1
• https://github.com/psd-tools/psd-tools
• https://github.com/psd-tools/psd-tools/releases/tag/v1.12.2

CVE-2026-27809 · published 2026-02-26T15:20:51Z · modified 2026-07-13T07:26:55.444033267Z · JSON