All vulnerabilities

npm

GHSA-wq5f-xc86-pv6w

sharp : Vulnerability in librsvg dependency CVE-2026-96889

Severity
High
Published
6 Oct 2026
Last changed
6 Oct 2026
Added to UpHeron
14 Oct 2026
Fixed in
0.35.5
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
sharpnpm · osv:npm:sharp
  • Every version before 0.35.5

References