ag-psd vulnerabilities

2 known vulnerabilities in ag-psd from Agamnentzar. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ag-psd: Allocation of Resources Without Limits or Throttling

  CVE-2026-63501Nov 3, 2026Agamnentzar

  ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd() accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore pass

• 7.5 High severity

  ag-psd: Memory Allocation with Excessive Size Value

  CVE-2026-62297Oct 30, 2026Agamnentzar

  ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, `readPsd()` commits image and layer buffers from attacker-declared PSD geometry before validating the declaratio