npm/sharp CVE-2026-114112: high 8.9
sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545
Action: Upgrade sharp to 0.35.4 or later.
npm i sharp@0.35.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.35.4 | - |
Fixed versions
| 0.35.4 |
Sources
- osv: GHSA-rgj7-g3m4-5g8c
- nvd: CVE-2026-114112
- https://github.com/lovell/sharp/security/advisories/GHSA-rgj7-g3m4-5g8c
- https://github.com/strukturag/libheif/security/advisories/GHSA-2jg2-4ch7-h545
- https://github.com/strukturag/libheif/security/advisories/GHSA-g89c-p67h-r497
- https://github.com/lovell/sharp
- https://github.com/lovell/sharp/releases/tag/v0.35.4
CVE-2026-114112 · published · modified · JSON