All vulnerabilities

npm

GHSA-rgj7-g3m4-5g8c

sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

Severity
High
Published
8 Sept 2026
Last changed
8 Sept 2026
Added to UpHeron
14 Oct 2026
Fixed in
0.35.4
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
sharpnpm · osv:npm:sharp
  • Every version before 0.35.4

References