{"action":"Upgrade sharp to 0.35.0 or later.","affected":[{"fixed":"0.35.0","introduced":"0"}],"component":"sharp","cve_ids":["CVE-2026-114113"],"ecosystem":"npm","exploited":false,"fixed_versions":["0.35.0"],"ghsa_id":"GHSA-f88m-g3jw-g9cj","id":"tcs_01M5JKSF6TGD4VTNZJW3XR853S","modified_at":"2026-10-21T10:57:27.250198301Z","published_at":"2026-07-21T22:07:17Z","references":["https://osv.dev/vulnerability/GHSA-f88m-g3jw-g9cj","https://github.com/libvips/libvips/security/advisories/GHSA-2fcj-gj27-279x","https://github.com/libvips/libvips/security/advisories/GHSA-523x-vhfw-6r76","https://github.com/libvips/libvips/security/advisories/GHSA-jmwm-wc68-mhwm","https://github.com/libvips/libvips/security/advisories/GHSA-r98w-4fp7-m9c7","https://github.com/lovell/sharp/security/advisories/GHSA-f88m-g3jw-g9cj","https://github.com/lovell/sharp"],"severity":{"label":"high","score":8.4},"sources":[{"source":"osv","source_id":"GHSA-f88m-g3jw-g9cj","url":"https://osv.dev/vulnerability/GHSA-f88m-g3jw-g9cj"},{"source":"nvd","source_id":"CVE-2026-114113","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114113"}],"summary":"sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591"}