CVE-2026-61825

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in "SharpEditorFormField": attacker-controlled content bearing the "data-html-content" attribute can bypass HTML...

CVE-2026-61825: Improper Neutralization of Input During Web Page Generation

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in SharpEditorFormField: attacker-controlled content bearing the data-html-content attribute can bypass HTML...

PT-2026-98242

Name of the Vulnerable Software and Affected Versions code16 Sharp versions prior to 9.22.5 Description A stored cross-site scripting issue exists in the rich-text editor because the HTML sanitizer allows the srcdoc attribute on iframe elements. While markup within srcdoc is HTML-encoded during...

CVE-2026-61823: Improper Neutralization of Input During Web Page Generation

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in the rich-text editor because the HTML sanitizer permits the srcdoc attribute on iframe elements. Although markup...

ROOT-APP-NPM-GHSA-54XQ-CGQR-RPM3 GHSA-54xq-cgqr-rpm3 in sharp - Patched by Root

Root has patched GHSA-54xq-cgqr-rpm3 in the sharp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-F88M-G3JW-G9CJ GHSA-f88m-g3jw-g9cj in sharp - Patched by Root

Root has patched GHSA-f88m-g3jw-g9cj in the sharp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-RGJ7-G3M4-5G8C GHSA-rgj7-g3m4-5g8c in sharp - Patched by Root

Root has patched GHSA-rgj7-g3m4-5g8c in the sharp package for Root:npm. Multiple fixed versions available...

PT-2026-105949

Root has patched GHSA-rgj7-g3m4-5g8c in the sharp package for Root:npm. Multiple fixed versions available...

CLSA-2026-1789549875 TuxCare security update for sharp (1 CVE)

TuxCare rebuilt sharp to address 1 CVE. Fixed in 0.27.2-tuxcare.1...

PT-2026-99266

TuxCare rebuilt sharp to address 1 CVE. Fixed in 0.27.2-tuxcare.1...

Exploit for Use After Free in Linux Linux_Kernel

AQUOS R6 GhostLock temporary root Device-specific Linux 5.4 p...

PT-2026-96066

Root has patched GHSA-54xq-cgqr-rpm3 in the sharp package for Root:npm. Multiple fixed versions available...

Heap-based Buffer Overflow

Overview astro is an Astro is a modern site builder with web best practices, performance, and DX front-of-mind. Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the Sharp image optimization. An attacker can execute code on the server by supplying a malicious...

GHSA-26W7-CXV4-GFX2 Astro: Remote code execution through AVIF image optimization

A vulnerability in libheif, used by the default Sharp image service in Astro, can lead to remote code execution when a malicious AVIF image is optimized. Projects are affected when an attacker can cause Astro to process an untrusted AVIF image. The fix was released in Astro 7.2.8, which requires...

Astro: Remote code execution through AVIF image optimization

A vulnerability in libheif, used by the default Sharp image service in Astro, can lead to remote code execution when a malicious AVIF image is optimized. Projects are affected when an attacker can cause Astro to process an untrusted AVIF image. The fix was released in Astro 7.2.8, which requires...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22218 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RGJ7-G3M4-5G8C...

NPM: sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

NPM: sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545 discovered by ? in WordPress Npm sharp versions 0.35.4...

GHSA-RGJ7-G3M4-5G8C sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

Impact A number of vulnerabilities, two rated as "Critical" severity using CVSSv3, have been discovered and fixed in the upstream libheif dependency. These can lead to possible remote code execution RCE on glibc-based Linux when run under certain conditions. The attack vector for these claims to ...

Heap-based Buffer Overflow

Overview sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the VipsForeignLoadHeif process. An attacker can execute arbitrary code by...

sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

Impact A number of vulnerabilities, two rated as "Critical" severity using CVSSv3, have been discovered and fixed in the upstream libheif dependency. These can lead to possible remote code execution RCE on glibc-based Linux when run under certain conditions. The attack vector for these claims to ...