Skip to content
Threat Feed
Subscribe

Product

Npm/Sharp (< 0.35.0)

1 brief RSS
high advisory

Multiple High-Severity Vulnerabilities in sharp and libvips Image Processing Libraries

Multiple high-severity vulnerabilities, including CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, and CVE-2026-35591, have been identified and patched in the libvips dependency used by the sharp image processing library, affecting users processing untrusted input with sharp versions prior to 0.35.0 or globally installed libvips prior to 8.18.3.

npm/sharp +1 vulnerability supply-chain image-processing npm libvips
4c