CVE-2026-31808
1 advisory.
npm/file-type CVE-2026-31808: medium 5.3, EPSS 0.43%
file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header
Action: Upgrade file-type to 21.3.1 or later.
npm i file-type@21.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.0.0 | 21.3.1 | - |
Fixed versions
| 21.3.1 |
Sources
- osv: GHSA-5v7r-6r5c-r473
- https://github.com/sindresorhus/file-type/security/advisories/GHSA-5v7r-6r5c-r473
- https://nvd.nist.gov/vuln/detail/CVE-2026-31808
- https://github.com/sindresorhus/file-type/commit/319abf871b50ba2fa221b4a7050059f1ae096f4f
- https://github.com/sindresorhus/file-type
CVE-2026-31808 · published · modified · JSON