CVE-2026-8813
1 advisory.
npm/exifreader CVE-2026-8813: high 7.5, EPSS 0.61%
ExifReader is vulnerable to denial of service via crafted ICC `mluc` tag
Action: Upgrade exifreader to 4.39.0 or later.
npm i exifreader@4.39.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.10.0 | 4.39.0 | - |
Fixed versions
| 4.39.0 |
Sources
- osv: GHSA-h64w-w9pr-82m4
- https://github.com/mattiasw/ExifReader/security/advisories/GHSA-h64w-w9pr-82m4
- https://nvd.nist.gov/vuln/detail/CVE-2026-8813
- https://github.com/mattiasw/ExifReader/commit/c9d88b67e127b2dcc7b46e328df468257fb2dc30
- https://github.com/mattiasw/ExifReader
- https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689335
CVE-2026-8813 · published · modified · JSON