lovell sharp vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20263

Newest CVEs

• CVE-2026-114113

  Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders

  lovell · sharp

  High8.4
• CVE-2026-114112

  Sharp before 0.35.4 RCE via bundled libheif AVIF decoding

  lovell · sharp

  High8.9
• CVE-2026-114111

  Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability

  lovell · sharp

  High8.9
• CVE-2022-29256

  Possible vulnerability at 'npm install' time in sharp if an attacker has control over build environment

  lovell · sharp

  Medium6.5