Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-pj96-35fp-cfcc
  • npm/exifreader
 ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion 17 Sep
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-85715
  • github.com/mattiasw/exifreader
 ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion 17 Sep
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-53496
  • github.com/mattiasw/exifreader
 ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes 14 Sep
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-g77h-45rf-hcx4
  • npm/exifreader
 ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes 17 Jul
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-h64w-w9pr-82m4
  • npm/exifreader
 ExifReader is vulnerable to denial of service via crafted ICC `mluc` tag 29 May
  • Fix available
  • Severity - 7.7 (High)
GHSA-rr89-w3h9-m66j
  • npm/exifreader
 ExifReader is vulnerable to denial of service via unbounded decompression of image metadata 29 May
  • Fix available
  • Severity - 5.5 (Medium)
CVE-2026-8814
  • github.com/mattiasw/exifreader
 See record for full details 19 May
  • Fix available
  • Severity - 5.5 (Medium)
CVE-2026-8813
  • github.com/mattiasw/exifreader
 See record for full details 19 May
  • Fix available
  • Severity - 7.7 (High)