CVE-2026-114113

HIGH
—CVSS v3
—CVSS v2
0.11% EPSS (exploit probability)
—CWE

Description

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to process untrusted input, triggering these libvips flaws.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references