CVE Watch21 oct 2026

CVE-2026-114113

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2

CVSS

—

Sin CVSS

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 21 oct 2026 · Última mod.: 21 oct 2026

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-212026-10-22

Descripción técnica

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to process untrusted input, triggering these libvips flaws.

Referencias oficiales

github.comhttps://github.com/lovell/sharp/security/advisories/GHSA-f88m-g3jw-g9cj
www.vulncheck.comhttps://www.vulncheck.com/advisories/sharp-before-0.35.0-multiple-vulnerabilities-via-bundled-libvips-image-decoders

CVEs relacionados

Sin CVEs relacionados por CWE o producto.