CVE-2026-8814
1 advisory.
npm/exifreader CVE-2026-8814: medium 5.3
ExifReader is vulnerable to denial of service via unbounded decompression of image metadata
Action: Upgrade exifreader to 4.39.0 or later.
npm i exifreader@4.39.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.20.0 | 4.39.0 | - |
Fixed versions
| 4.39.0 |
Sources
- osv: GHSA-rr89-w3h9-m66j
- https://github.com/mattiasw/ExifReader/security/advisories/GHSA-rr89-w3h9-m66j
- https://nvd.nist.gov/vuln/detail/CVE-2026-8814
- https://github.com/mattiasw/ExifReader/commit/5f116128adc19f674902f8bf582bfe7dd0a36375
- https://github.com/mattiasw/ExifReader
- https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689340
CVE-2026-8814 · published · modified · JSON