ROOT-APP-NPM-CVE-2026-32630 CVE-2026-32630 in @rootio/file-type - Patched by Root

Root has patched CVE-2026-32630 in the @rootio/file-type package for Root:npm. Multiple fixed versions available...

4591-libs (>=0.0.1, <=0.2.0), @0x666c6f/morpho-onchain-data-model (>=1.0.0, <=1.0.5) +4153 more potentially affected by CVE-2026-32630 via file-type (>=20.0.0, <=21.3.1)

file-type NPM version =20.0.0, =0.0.1, =1.0.0, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0-rc.2 and more Source cves: CVE-2026-32630 Source advisory: SNYK:JS-FILETYPE-15609896...

4591-libs (>=0.0.1, <=0.2.0), @0x666c6f/morpho-onchain-data-model (>=1.0.0, <=1.0.5) +4153 more potentially affected by CVE-2026-32630 via file-type (>=20.0.0, <=21.3.1)

file-type NPM version =20.0.0, =0.0.1, =1.0.0, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.0-alpha.119, =1.2.1-dev.3, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0-rc.2 and more Source cves: CVE-2026-32630 Source advisory: OSV:GHSA-J47W-4G3G-C36V...

org.webjars.npm:archive-type (4.0.0), org.webjars.npm:decompress-tar (4.1.1) +2 more potentially affected by CVE-2026-32630 via org.webjars.npm:file-type (>=3.9.0, <=5.2.0)

org.webjars.npm:file-type MAVEN version =3.9.0, =5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:file-type and may be impacted: - org.webjars.npm:archive-type 4.0.0 - org.webjars.npm:decompress-tar 4.1.1 -...

CVE-2026-32630 file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry

file-type detects the file type of a file, stream, or data. From 20.0.0 to 21.3.1, a crafted ZIP file can trigger excessive memory growth during type detection in file-type when using fileTypeFromBuffer, fileTypeFromBlob, or fileTypeFromFile. The ZIP inflate output limit is enforced for...