diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 0216d17..ff35f7e 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -16,6 +16,10 @@ jobs:
         with:
           go-version: 1.21
 
+      - name: Patch ghostsccript thanks to CVE-2018-16509
+        run: |
+          sed -i '$i<policy domain="coder" rights="read | write" pattern="PDF" />' /etc/ImageMagick-6/policy.xml
+
       - name: Build
         run: |
           sudo apt install pkg-config libmagickwand-dev imagemagick gcc libc-dev