https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:34:04 +0000 https://cve.radiocsirt.org/vuln/cve-2026-33327 <p><strong>Affected:</strong> libvips</p> <p>libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1.</p> <p><strong>Affected:</strong> libvips</p> <p>libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-33327 https://cve.radiocsirt.org/vuln/ghsa-f88m-g3jw-g9cj <p><strong>Affected:</strong> npm: sharp</p> <p>### Impact</p> <p>A number of vulnerabilities, two rated as &#34;High&#34; severity using CVSSv4, have been discovered and fixed in the upstream libvips dependency.</p> <p>Those processing untrusted input with versions of sharp prior to 0.35.0 are affected.</p> <p>### Patches</p> <p>#### Using prebuilt binaries provided by sharp?</p> <p>Most people rely on the prebuilt binaries provided by sharp.</p> <p>Please upgrade sharp to the latest version, currently 0.35.3, which provides libvips 8.18.3.</p> <p>#### Using a globally-installed libvips?</p> <p>Please ensure you are using the latest libvips 8.18.3.</p> <p>### Workarounds Add the following to your code to prevent sharp from decoding GIF, TIFF and VIPS images. ```js sharp.block({ operation: [&#34;VipsForeignLoadNsgif&#34;, &#34;VipsForeignLoadTiff&#34;, &#34;VipsForeignLoadVips&#34;] }); ```</p> <p><strong>Affected:</strong> npm: sharp</p> <p>### Impact</p> <p>A number of vulnerabilities, two rated as &#34;High&#34; severity using CVSSv4, have been discovered and fixed in the upstream libvips dependency.</p> <p>Those processing untrusted input with versions of sharp prior to 0.35.0 are affected.</p> <p>### Patches</p> <p>#### Using prebuilt binaries provided by sharp?</p> <p>Most people rely on the prebuilt binaries provided by sharp.</p> <p>Please upgrade sharp to the latest version, currently 0.35.3, which provides libvips 8.18.3.</p> <p>#### Using a globally-installed libvips?</p> <p>Please ensure you are using the latest libvips 8.18.3.</p> <p>### Workarounds Add the following to your code to prevent sharp from decoding GIF, TIFF and VIPS images. ```js sharp.block({ operation: [&#34;VipsForeignLoadNsgif&#34;, &#34;VipsForeignLoadTiff&#34;, &#34;VipsForeignLoadVips&#34;] }); ```</p> https://cve.radiocsirt.org/vuln/ghsa-f88m-g3jw-g9cj