Homepage

psd-tools@1.17.0

Python package for working with Adobe Photoshop PSD files

  • latest version

    1.17.4

  • latest non vulnerable version

    1.17.4

  • first published

    13 years ago

  • latest version published

    28 days ago

  • licenses detected

  • View psd-tools package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the psd-tools package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    External Control of File Name or Path

    psd-tools is a Python package for working with Adobe Photoshop PSD files as described in specification.

    Affected versions of this package are vulnerable to External Control of File Name or Path through the save and open functions. An attacker can write arbitrary files to attacker-chosen paths and read arbitrary files by crafting a malicious PSD file with specially crafted smart-object filenames or descriptors.

    How to fix External Control of File Name or Path?

    Upgrade psd-tools to version 1.17.1 or higher.

    [,1.17.1)
    Go back to all versions of this package