sharp vulnerabilities

CVEs whose affected-version data names the sharp package (composer, npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

8 CVEsRSS

CVE-2026-114112High· 8.9

6d ago

Sharp before 0.35.4 RCE via bundled libheif AVIF decoding

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications …

▾ Twilightlovell · sharpEPSS 0.24%via CVEORG

CVE-2026-114111High· 8.9

6d ago

Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a craft…

▾ Twilightlovell · sharpEPSS 0.13%via CVEORG

CVE-2026-114113High· 8.4

6d ago

Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF, TIFF and VIPS image decoders. Attackers can supply craf…

▾ Twilightlovell · sharpEPSS 0.11%via CVEORG

GHSA-wq5f-xc86-pv6wHigh

3w ago

sharp : Vulnerability in librsvg dependency CVE-2026-96889

▾ Twilightsharp · sharpvia GHSA

CVE-2026-61825High· 8.7

1mo ago

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in `SharpEditorFormField`: attacker-controlled content be…

▾ Twilightcode16 · sharpEPSS 0.23%via NVD

CVE-2026-61823High· 7.3

1mo ago

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in the rich-text editor because the HTML sanitizer permit…

▾ Twilightcode16 · sharpEPSS 0.21%via NVD

GHSA-rgj7-g3m4-5g8cHigh

1mo ago

sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

▾ Twilightsharp · sharpvia GHSA

GHSA-f88m-g3jw-g9cjHigh

3mo ago

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

▾ Twilightsharp · sharpvia GHSA