VYPR

File Type

by sindresorhus

Source repositories

CVEs (3)

  • CVE-2022-36313MedJul 21, 2022
    risk 0.29cvss 5.5epss 0.00

    An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS…

  • CVE-2026-32630MedMar 16, 2026
    risk 0.27cvss 5.3epss 0.00

    file-type detects the file type of a file, stream, or data. From 20.0.0 to 21.3.1, a crafted ZIP file can trigger excessive memory growth during type detection in file-type when using fileTypeFromBuffer(), fileTypeFromBlob(), or fileTypeFromFile(). The ZIP inflate output limit…

  • CVE-2026-31808MedMar 10, 2026
    risk 0.27cvss 5.3epss 0.00

    file-type detects the file type of a file, stream, or data. Prior to 21.3.1, a denial of service vulnerability exists in the ASF (WMV/WMA) file type detection parser. When parsing a crafted input where an ASF sub-header has a size field of zero, the parser enters an infinite…