sindresorhus
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| file-type | 2 | – | Mar 13, 2026 |
| open | 1 | – | Oct 29, 2026 |
| sindresorhus/semver-regex | 1 | – | Sep 15, 2021 |
Exploited and recent CVEs
- CVE-2026-119025 open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows 1.4%
- CVE-2026-32630 file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry 0.3%
- CVE-2026-31808 file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header 0.4%
- CVE-2021-3795 Inefficient Regular Expression Complexity in sindresorhus/semver-regex 1.5%