Skip to content
OpenAdvisories

Package · npm

sharp

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2022-29256

    Possible vulnerability at 'npm install' time in sharp if an attacker has control over build environment

    sharp is an application for Node.js image processing. Prior to version 0.30.5, there is a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. If an attacker has the ability to…

    lovell sharp sharp npm