ROOT-APP-NPM-CVE-2025-71319 CVE-2025-71319 in image-size - Patched by Root

Root has patched CVE-2025-71319 in the image-size package for Root:npm. Multiple fixed versions available...

org.webjars.npm:datauri (>=1.1.0, <=2.0.0), org.webjars.npm:image-thumbnail (1.0.15) +1 more potentially affected by CVE-2025-71319 +1 more via org.webjars.npm:image-size (>=0.5.5, <=2.0.0-alpha.1)

org.webjars.npm:image-size MAVEN version =0.5.5, =1.1.0, =2.7.1, =2.7.2 Source cves: CVE-2025-71319, CVE-2025-71329 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17295815...

@adobe/helix-importer (>=3.1.2, <=3.4.79), @adobe/helix-md2docx (>=2.1.38, <=2.1.107) +146 more potentially affected by CVE-2025-71319 via image-size (>=1.1.0, <=1.2.0)

image-size NPM version =1.1.0, =3.1.2, =2.1.38, =1.0.0, =2.4.3, =1.1.1, =1.0.0, =1.0.0-B001, =0.0.28, =2.17.13, =0.17.6, =1.16.10, =7.1.0, =0.0.1, =1.1.69, =5.0.0-alpha.27, =5.0.0-alpha.39 and more Source cves: CVE-2025-71319 Source advisory: MEND:CVE-2025-71319...

@adobe/helix-importer (>=3.1.2, <=3.4.79), @adobe/helix-md2docx (>=2.1.38, <=2.1.107) +146 more potentially affected by CVE-2025-71319 via image-size (>=1.1.0, <=1.2.0)

image-size NPM version =1.1.0, =3.1.2, =2.1.38, =1.0.0, =2.4.3, =1.1.1, =1.0.0, =1.0.0-B001, =0.0.28, =2.17.13, =0.17.6, =1.16.10, =7.1.0, =0.0.1, =1.1.69, =5.0.0-alpha.27, =5.0.0-alpha.39 and more Source cves: CVE-2025-71319 Source advisory: OSV:GHSA-M5QC-5HW7-8VG7...

@adobe/helix-importer (>=3.4.65, <=3.4.79), @adobe/helix-md2docx (>=2.2.0, <=2.2.7) +57 more potentially affected by CVE-2025-71319 via image-size (>=2.0.0, <=2.0.1)

image-size NPM version =2.0.0, =3.4.65, =2.2.0, =2.6.5, =1.3.47, =1.4.2, =5.0.0-alpha.40, =7.12.0-main1711fab, =0.28.1-feature.esm.cjs.8, =0.28.1-feature.esm.cjs.8, =0.28.1-feature.esm.cjs.13, =0.28.1-feature.jose.vcdm.19, =0.28.1-feature.esm.cjs.18, =0.28.1-feature.esm.cjs.8,...

CVE-2025-71319

creationtimestamp| type| source ---|---|--- 2025-04-02 15:04:58+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-m5qc-5hw7-8vg7 2026-07-01 15:14:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsnpvgpw2o 2026-07-02 23:55:28+00:00| seen|...