@ampproject/eleventy-plugin-amp (>=0.5.6, <=0.5.8), @ampproject/toolbox-cli (>=2.0.0-alpha.0, <=3.0.0-canary.2) +32 more potentially affected by CVE-2026-104861 via probe-image-size (>=7.0.0, <=7.3.0)

probe-image-size NPM version =7.0.0, =0.5.6, =2.0.0-alpha.0, =2.8.0-canary.6, =2.8.8, =14.9.23-prev, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =1.2.0, =1.2.0, =1.1.2, =1.0.0-beta.2, =1.0.0-beta.37 and more Source cves: CVE-2026-104861 Source advisory: OSV:GHSA-GJJ5-9665-RWRC...

CVE-2026-104861

creationtimestamp| type| source ---|---|--- 2026-08-15 06:16:01+00:00| published-proof-of-concept| https://github.com/nodeca/probe-image-size/security/advisories/GHSA-gjj5-9665-rwrc 2026-10-02 18:31:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvyyqd6gc24 2026-10-03...