PT-2026-49834

we found two new critical vulnerabilities in SAIL, the image decoding library: - CVE-2026-54626 TGA decoder - CVE-2026-54627 PSD decoder both heap out-of-bounds writes CVSS 9.8. responsibly disclosed and now fixed, thanks to the quick reaction of the maintainers...