An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.Referenceshttps://github.com/psd-tools/psd-tools/pull/198https://github.com/psd-tools/psd-tools/releases/tag/v1.9.4
