{"action":"Upgrade sharp to 0.35.4 or later.","affected":[{"fixed":"0.35.4","introduced":"0"}],"component":"sharp","cve_ids":["CVE-2026-114112"],"ecosystem":"npm","exploited":false,"fixed_versions":["0.35.4"],"ghsa_id":"GHSA-rgj7-g3m4-5g8c","id":"tcs_01M5JKSM53PJFN0VF1T33RBV7X","modified_at":"2026-10-21T10:57:29.264848152Z","published_at":"2026-09-08T21:25:11Z","references":["https://osv.dev/vulnerability/GHSA-rgj7-g3m4-5g8c","https://github.com/lovell/sharp/security/advisories/GHSA-rgj7-g3m4-5g8c","https://github.com/strukturag/libheif/security/advisories/GHSA-2jg2-4ch7-h545","https://github.com/strukturag/libheif/security/advisories/GHSA-g89c-p67h-r497","https://github.com/lovell/sharp","https://github.com/lovell/sharp/releases/tag/v0.35.4"],"severity":{"label":"high","score":8.9},"sources":[{"source":"osv","source_id":"GHSA-rgj7-g3m4-5g8c","url":"https://osv.dev/vulnerability/GHSA-rgj7-g3m4-5g8c"},{"source":"nvd","source_id":"CVE-2026-114112","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114112"}],"summary":"sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545"}