CVE-2026-114111
1 advisory.
npm/sharp CVE-2026-114111: high 8.9
sharp : Vulnerability in librsvg dependency CVE-2026-96889
Action: Upgrade sharp to 0.35.5 or later.
npm i sharp@0.35.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.35.5 | - |
Fixed versions
| 0.35.5 |
Sources
- osv: GHSA-wq5f-xc86-pv6w
- nvd: CVE-2026-114111
- https://github.com/lovell/sharp/security/advisories/GHSA-wq5f-xc86-pv6w
- https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236
- https://github.com/lovell/sharp
- https://github.com/lovell/sharp/releases/tag/v0.35.5
- https://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241
- https://www.cve.org/CVERecord?id=CVE-2026-96889
CVE-2026-114111 · published · modified · JSON