file-type
22.2.0 · 14 Oct 2026MIT51.4M / weekRepositoryHomepagenpmAtom feed
Your version
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
| Line | Newest | Where it stands |
|---|---|---|
| 22.2.0 | No known advisory | |
| 21.3.4 | Safe from 21.3.2 | |
| 20.5.0 | 12 open advisories, worst high · last release Apr 2025, no longer updated |
- Highfile-type vulnerable to Infinite Loop via malformed MKV fileGHSA-mhxj-85r3-2x55 · 22 Jul 2022fixed in 17.1.3, 16.5.4
- Moderatefile-type: ZIP Decompression Bomb DoS via [Content_Types].xml entryGHSA-j47w-4g3g-c36v · 13 Mar 2026fixed in 21.3.2
- Moderatefile-type affected by infinite loop in ASF parser on malformed input with zero-size sub-headerGHSA-5v7r-6r5c-r473 · 10 Mar 2026fixed in 21.3.1
Registry facts last checked 28 Oct 2026. Releases and advisories last read 28 Oct 2026.