8.4Yüksek
CVE-2026-114113Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders
Açıklama
Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to process untrusted input, triggering these libvips flaws.
Zayıflık türü (CWE):
CWE-1395
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- GitHub Security Advisory (GHSA-f88m-g3jw-g9cj) vendor-advisory
- VulnCheck Advisory: Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders third-party-advisory