{"action":"Upgrade sharp to 0.35.5 or later.","affected":[{"fixed":"0.35.5","introduced":"0"}],"component":"sharp","cve_ids":["CVE-2026-114111"],"ecosystem":"npm","exploited":false,"fixed_versions":["0.35.5"],"ghsa_id":"GHSA-wq5f-xc86-pv6w","id":"tcs_01M5JKSGGG0TBJ3C3XMX12TTMB","modified_at":"2026-10-21T10:57:27.441638733Z","published_at":"2026-10-06T13:43:57Z","references":["https://osv.dev/vulnerability/GHSA-wq5f-xc86-pv6w","https://github.com/lovell/sharp/security/advisories/GHSA-wq5f-xc86-pv6w","https://github.com/lovell/sharp/commit/96de105d9d36ab04c76c2b78b97255171630d236","https://github.com/lovell/sharp","https://github.com/lovell/sharp/releases/tag/v0.35.5","https://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241","https://www.cve.org/CVERecord?id=CVE-2026-96889"],"severity":{"label":"high","score":8.9},"sources":[{"source":"osv","source_id":"GHSA-wq5f-xc86-pv6w","url":"https://osv.dev/vulnerability/GHSA-wq5f-xc86-pv6w"},{"source":"nvd","source_id":"CVE-2026-114111","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114111"}],"summary":"sharp : Vulnerability in librsvg dependency CVE-2026-96889"}