Skip to content
OpenAdvisories

Package · npm

canvas

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2020-8215

    Buffer overflow in canvas

    A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.

    canvas npm
  • Medium —
    GHSA-vpq5-4rc8-c222

    Denial of Service in canvas

    Versions of `canvas` prior to 1.6.10 are vulnerable to Denial of Service. Processing malicious JPEGs or GIFs could crash the node process. ## Recommendation Upgrade to version 1.6.10

    canvas npm