5 matches found
CLEANSTART-2026-CH28428 Security fixes in langfuse 3.224.1-r1
Package langfuse version 3.224.1-r1 fixes 5 vulnerabilities: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591, ghsa-f88m-g3jw-g9cj...
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0to1-builders (0.1.0) +23055 more potentially affected by CVE-2026-33328 via sharp (>=0.4.2, <=0.34.5)
sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =1.252.0 and more Source cves: CVE-2026-33328 Source advisory: SNYK:JS-SHARP-18184262...
UBUNTU-CVE-2026-33328
libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1...
CVE-2026-33328 Possible integer overflow on 32-bit systems when reading GIF images
libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1...
Linux Distros Unpatched Vulnerability : CVE-2026-33328
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could...