sharp

0.35.5 · 27 Sep 2026Apache-2.0104.1M / weekRepository Homepage npm Atom feed

Your version

0.16.1

13 Oct 2016

0.35.5 is the newest release of 0.16.x.

Security

5 advisories affect 0.16.1; 0.35.5 fixes the others

High
sharp : Vulnerability in librsvg dependency CVE-2026-96889GHSA-wq5f-xc86-pv6w · 6 Oct 2026
Fixed in 0.35.5
High
sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545GHSA-rgj7-g3m4-5g8c · 8 Sep 2026
Fixed in 0.35.4
High
sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591GHSA-f88m-g3jw-g9cj · 21 Jul 2026
No fix yet
High
sharp vulnerability in libwebp dependency CVE-2023-4863GHSA-54xq-cgqr-rpm3 · 16 Nov 2023
Fixed in 0.32.6
Moderate
sharp vulnerable to Command Injection in post-installation over build environmentGHSA-gp95-ppv5-3jc5 · 1 Jun 2022
Fixed in 0.30.5

Release note

No note was found for 0.16.1 on GitHub or in the repository's changelog.