High severityNVD Advisory· Published Oct 21, 2026

CVE-2026-114113

Description

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to process untrusted input, triggering these libvips flaws.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lovell/sharpllm-create
Range: <0.35.0

Patches

Vulnerability mechanics

References

github.com/lovell/sharp/security/advisories/GHSA-f88m-g3jw-g9cjnvd
www.vulncheck.com/advisories/sharp-before-0.35.0-multiple-vulnerabilities-via-bundled-libvips-image-decodersnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000