Skip to content
Llovell
Products
| Product | CVEs | Exploited | Latest |
|---|
| sharp | 4 | – | Oct 21, 2026 |
Exploited and recent CVEs
-
CVE-2026-114113
High 8.4
Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders
0.1%
-
CVE-2026-114112
High 8.9
Sharp before 0.35.4 RCE via bundled libheif AVIF decoding
0.2%
-
CVE-2026-114111
High 8.9
Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability
0.1%
-
CVE-2022-29256
Medium 6.5
Possible vulnerability at 'npm install' time in sharp if an attacker has control over build environment
0.4%