789 matches found
-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22218 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)
sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.1, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.38.37 and more Source cves: unknown CVE Source advisory: SNYK:JS-SHARP-19653587...
Heap-based Buffer Overflow
Overview org.webjars.npm:sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the VipsForeignLoadHeif process. An attacker can execute arbitra...
PT-2026-95729
A vulnerability in libheif, used by the default Sharp image service in Astro, can lead to remote code execution when a malicious AVIF image is optimized. Projects are affected when an attacker can cause Astro to process an untrusted AVIF image. The fix was released in Astro 7.2.8, which requires...
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
--- Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting...
WS-2026-0060
A number of vulnerabilities, two rated critical, have been discovered and fixed in the upstream libheif dependency bundled by sharp. These can lead to possible remote code execution on glibc-based Linux when processing untrusted input. sharp before 0.35.4 bundles libheif 1.23.1 or earlier; 0.35.4...
Malicious code in ultra-sharp-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15805 Malicious code in ultra-sharp-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-sharp-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15791 Malicious code in tiny-sharp-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in super-sharp-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15782 Malicious code in super-sharp-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in super-sharp-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15781 Malicious code in super-sharp-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15773 Malicious code in piko-sharp-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in piko-sharp-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in nano-sharp-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15759 Malicious code in nano-sharp-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mini-sharp-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...