SI
Vendor
sindresorhus
4
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-119025 New | OP open sindresorhus | 7.5 | Oct 29 | open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows |
| CVE-2026-32630 | FI file-type sindresorhus | 5.3 | Mar 13 | file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry |
| CVE-2026-31808 | FI file-type sindresorhus | 5.3 | Mar 10 | file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header |
| CVE-2022-36313 | FI File-type Sindresorhus | 5.5 | Jul 21 | An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js |