Skip to content
Threat Feed
Subscribe

Vendor

Sharp

3 briefs RSS
high threat

Unauthenticated Local File Inclusion in Sharp and Toshiba Multifunction Printers

Sharp and Toshiba multifunction printers are vulnerable to an unauthenticated path traversal attack allowing remote actors to read arbitrary sensitive system files via the installed_emanual_down.html endpoint.

exploited Multifunction printers
1r 2t 1c
high advisory

Critical Remote Code Execution Vulnerabilities in libheif Affecting Sharp

Multiple critical vulnerabilities in the libheif library, including CVE-2026-84383, enable potential remote code execution via malicious AVIF image processing in applications using the sharp npm package.

PoC libheif +1 vulnerability rce image-processing library-vulnerability
1t 1c updated
high advisory

Multiple High-Severity Vulnerabilities in sharp and libvips Image Processing Libraries

Multiple high-severity vulnerabilities, including CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, and CVE-2026-35591, have been identified and patched in the libvips dependency used by the sharp image processing library, affecting users processing untrusted input with sharp versions prior to 0.35.0 or globally installed libvips prior to 8.18.3.

npm/sharp +1 vulnerability supply-chain image-processing npm libvips
4c