Security fixes are applied to the latest published version of Photo Scan Cropper.

Please do not publish exploit details in a public issue before a fix is available. Contact the project maintainer privately and include:

• the affected version;
• the input file type;
• a minimal reproducer when possible;
• the observed behavior;
• the expected impact.

Photo Scan Cropper is a local desktop utility. It does not need network access and does not execute scripts embedded in image filenames or metadata.

The program still opens external image and PDF files. A specially crafted file can expose vulnerabilities in third-party decoders. Keep dependencies pinned to reviewed versions, update them deliberately, rebuild the portable package, and repeat the release checks before publishing a new version.