sharp
0.35.5 · 27 Sep 2026Apache-2.0104.1M / weekRepositoryHomepagenpmAtom feed
Your version
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
| Line | Newest | Where it stands |
|---|---|---|
| 0.35.5 | Safe from 0.35.5 | |
| 0.34.5 | 3 open advisories, worst high | |
| 0.33.5 | 164 open advisories, worst high · last release Aug 2024, no longer updated |
- Highsharp : Vulnerability in librsvg dependency CVE-2026-96889GHSA-wq5f-xc86-pv6w · 6 Oct 2026fixed in 0.35.5
- Highsharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545GHSA-rgj7-g3m4-5g8c · 8 Sep 2026fixed in 0.35.4
- Highsharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591GHSA-f88m-g3jw-g9cj · 21 Jul 2026
- Highsharp vulnerability in libwebp dependency CVE-2023-4863GHSA-54xq-cgqr-rpm3 · 16 Nov 2023fixed in 0.32.6
- Moderatesharp vulnerable to Command Injection in post-installation over build environmentGHSA-gp95-ppv5-3jc5 · 1 Jun 2022fixed in 0.30.5
Registry facts last checked 28 Oct 2026. Releases and advisories last read 28 Oct 2026.