TI-2026-25139 CVE-2026-32630 · GHSA-j47w-4g3g-c36v
file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry
Priority MEDIUM 63
file-type detects the file type of a file, stream, or data.
sindresorhus
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
sindresorhus records in CISA KEVNo sindresorhus vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2026-82374 CVE-2026-119025 · GHSA-jgwm-4pmq-r4w4
OS command injection in open via PowerShell on Windows
Priority LOW 39
open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL.
TI-2021-02726 CVE-2021-3795 · GHSA-44c6-4v22-4mhx
Inefficient Regular Expression Complexity in sindresorhus/semver-regex
Priority LOW 36
semver-regex is vulnerable to Inefficient Regular Expression Complexity
TI-2026-24363 CVE-2026-31808 · GHSA-5v7r-6r5c-r473
file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header
Priority LOW 30
file-type detects the file type of a file, stream, or data.
TI-2022-16660 CVE-2022-36313 · GHSA-mhxj-85r3-2x55
An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for…
Priority LOW 25
An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js.