Path Traversal

psd-tools is vulnerable to Path Traversal. The vulnerability is due to improper validation and sanitization of attacker-controlled file paths in the SmartObject.save and SmartObject.open APIs, which allows an attacker to write arbitrary files to attacker-chosen locations outside the intended...