Get real-time updates on Telegram
Verified
ghsa:GHSA-WQ5F-XC86-PV6W: sharp < 0.35.5
sharp : Vulnerability in librsvg dependency CVE-2026-96889. Affected range: < 0.35.5. Fixed version: 0.35.5.
Affected technology
sharp · < 0.35.5
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source reports that an attacker could run code remotely under the conditions described by the source.
- Product
- sharp
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-06 17:57:05.567630+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-wq5f-xc86-pv6w.html