Psd-tools Project Psd-tools — known CVE vulnerabilities

Every CVE whose affected-product data names Psd-tools Project Psd-tools, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-10571 — CVSS 9.8 (critical): An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.
• CVE-2026-27809 — CVSS 9.1 (critical): psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed…