A flaw was found in the npm package ag-psd

2026-11-13

KROMSE explanation

A serious flaw in the npm package ag-psd (CVE-2026-62297, CVSS 7.5). The official record says: ag-psd is a JavaScript library for reading and writing Photoshop Document files.

Not confirmed yet, but attack code is public, so attacks often follow within days.

Projects that use the npm package ag-psd.

Update ag-psd to 31.0.0 or later.
Not sure if you use it? KROMSE can check your product for free.

KROMSELive threat centreSign inAdd your repository or website to see if it impacts youAdd repo or website

A flaw was found in the npm package ag-psd

KROMSE explanation

Loading the story…