CVE-2026-49836
2 advisories.
PyPI/psd-tools CVE-2026-49836: medium, EPSS 0.19%
psd-tools vulnerable to arbitrary file write via smart-object filename
Action: Upgrade psd-tools to 1.17.1 or later.
pip install psd-tools==1.17.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.17.1 | - |
Fixed versions
| 1.17.1 |
Sources
- osv: GHSA-2rmg-vrx8-9j2f
- https://github.com/psd-tools/psd-tools/security/advisories/GHSA-2rmg-vrx8-9j2f
- https://nvd.nist.gov/vuln/detail/CVE-2026-49836
- https://github.com/psd-tools/psd-tools/pull/657
- https://github.com/psd-tools/psd-tools
- https://github.com/pypa/advisory-database/tree/main/vulns/psd-tools/PYSEC-2026-2969.yaml
- http://github.com/psd-tools/psd-tools/releases/tag/v1.17.1
CVE-2026-49836 · published · modified · JSON
PyPI/psd-tools CVE-2026-49836: unknown, EPSS 0.19%
psd-tools vulnerable to arbitrary file write via smart-object filename
Action: Upgrade psd-tools to 1.17.1 or later.
pip install psd-tools==1.17.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.17.1 | - |
Fixed versions
| 1.17.1 |
Sources
- osv: PYSEC-2026-2969
- https://github.com/psd-tools/psd-tools/security/advisories/GHSA-2rmg-vrx8-9j2f
- https://github.com/psd-tools/psd-tools/pull/657
- https://github.com/psd-tools/psd-tools
- http://github.com/psd-tools/psd-tools/releases/tag/v1.17.1
- https://pypi.org/project/psd-tools
- https://github.com/advisories/GHSA-2rmg-vrx8-9j2f
- https://nvd.nist.gov/vuln/detail/CVE-2026-49836
CVE-2026-49836 · published · modified · JSON