@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.17) +24 more potentially affected by CVE-2026-85715 via exifreader (>=4.1.1, <=4.41.0)

exifreader NPM version =4.1.1, =0.0.5, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 and more Source cves: CVE-2026-85715 Source advisory: GHSA-PJ96-35FP-CFCC...

PT-2026-89422

Name of the Vulnerable Software and Affected Versions ExifReader versions prior to 4.41.1 Description ExifReader is susceptible to a denial-of-service issue when parsing specially crafted HEIC or AVIF ISO-BMFF files. The problem occurs in the getItems function within...