file-type
22.2.0 · 14 Oct 2026MIT51.4M / weekRepositoryHomepagenpmAtom feed
Upgrading file-type from 16.5.2 to 21.3.1
44 releases in betweennotes for 0
21.0.0, 20.0.0, 19.0.0, 18.0.0, 17.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
- ?
- changes to make
- 2
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 44 release notes. Advisories are counted from the advisory database, in full.
Security
1 advisory still affects 21.3.1
- file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entrymoderate · GHSA-j47w-4g3g-c36v
Upgrading to 21.3.2 clears it.
Fixes 2 advisories affecting 16.5.2
- file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-headermoderate · GHSA-5v7r-6r5c-r473
- file-type vulnerable to Infinite Loop via malformed MKV filehigh · GHSA-mhxj-85r3-2x55