CVE-2022-29256
1 advisory.
npm/sharp CVE-2022-29256: medium 6.5, EPSS 0.39%
sharp vulnerable to Command Injection in post-installation over build environment
Action: Upgrade sharp to 0.30.5 or later.
npm i sharp@0.30.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.30.5 | - |
Fixed versions
| 0.30.5 |
Sources
- osv: GHSA-gp95-ppv5-3jc5
- https://github.com/lovell/sharp/security/advisories/GHSA-gp95-ppv5-3jc5
- https://nvd.nist.gov/vuln/detail/CVE-2022-29256
- https://github.com/lovell/sharp/commit/a6aeef612be50f5868a77481848b1de674216f0c
- https://advisory.dw1.io/54
- https://github.com/lovell/sharp
CVE-2022-29256 · published · modified · JSON