VDB
Sign up

PYSEC-2020-91

Quick fix

PYSEC-2020-91 — psd-tools: upgrade to the fixed version with the command below.

pip install --upgrade 'psd-tools>=1.9.4'

Details

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/psd-tools
Introduced in: 0Fixed in: 1.9.4
Fixpip install --upgrade 'psd-tools>=1.9.4'

References