npm/@napi-rs/image: high 8.8
@napi-rs/image affected by libwebp CVE
Action: Upgrade @napi-rs/image to 1.7.0 or later.
npm i @napi-rs/image@1.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
- osv: GHSA-4vjr-crvh-383h
- https://github.com/Brooooooklyn/Image/security/advisories/GHSA-4vjr-crvh-383h
- https://github.com/Brooooooklyn/Image/commit/aa07979f6cd0c534a8befea87fac1210a3b621c1
- https://blog.isosceles.com/the-webp-0day
- https://github.com/Brooooooklyn/Image
- https://github.com/Brooooooklyn/Image/releases/tag/%40napi-rs%2Fimage%401.7.0
- https://github.com/advisories/GHSA-j7hp-h8jx-5ppr
published · modified · JSON