sharp
0.35.5 · 27 Sep 2026Apache-2.0104.1M / weekRepositoryHomepagenpmAtom feed
Your version
0.25.4
12 Jun 20200.35.5 is the newest release of 0.25.x.
Security
5 advisories affect 0.25.4; 0.35.5 fixes the others
- Highsharp : Vulnerability in librsvg dependency CVE-2026-96889GHSA-wq5f-xc86-pv6w · 6 Oct 2026Fixed in 0.35.5
- Highsharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545GHSA-rgj7-g3m4-5g8c · 8 Sep 2026Fixed in 0.35.4
- Highsharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591GHSA-f88m-g3jw-g9cj · 21 Jul 2026No fix yet
- Highsharp vulnerability in libwebp dependency CVE-2023-4863GHSA-54xq-cgqr-rpm3 · 16 Nov 2023Fixed in 0.32.6
- Moderatesharp vulnerable to Command Injection in post-installation over build environmentGHSA-gp95-ppv5-3jc5 · 1 Jun 2022Fixed in 0.30.5
Release note
No note was found for 0.25.4 on GitHub or in the repository's changelog.