All vulnerabilities

npm

GHSA-f88m-g3jw-g9cj

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

Severity
High
Published
21 Jul 2026
Last changed
10 Sept 2026
Added to UpHeron
14 Oct 2026
Fixed in
0.35.0
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
sharpnpm · osv:npm:sharp
  • Every version before 0.35.0

References