Skip to content
OpenAdvisories

Package · npm

probe-image-size

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-104861

    probe-image-size: Quadratic-time Denial of Service in the SVG Parser

    probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and lib/parse_stream/svg.js use the searching regular expression /<[-_.:a-zA-Z0-9][^>]*>/, which repeatedly scans to the end of input when attack…

    nodeca probe-image-size probe-image-size npm