CVE Watch27 de out. de 2026

CVE-2026-114113

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2

CVSS

—

Sem CVSS

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 21 de out. de 2026 · Última mod.: 27 de out. de 2026

EPSS · 30d

0.1%EPSS · 30 dias0.1%

2026-10-212026-11-07

Descrição técnica

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to process untrusted input, triggering these libvips flaws.

Referências oficiais

github.comhttps://github.com/lovell/sharp/security/advisories/GHSA-f88m-g3jw-g9cj
www.vulncheck.comhttps://www.vulncheck.com/advisories/sharp-before-0.35.0-multiple-vulnerabilities-via-bundled-libvips-image-decoders

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.