Vulnerabilities

TI-2026-25139 CVE-2026-32630 · GHSA-j47w-4g3g-c36v

file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry

MEDIUM 63

file-type detects the file type of a file, stream, or data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0035 Published 2026-03-13 Partial fix · 21.3.2 CWE-409

TI-2026-24363 CVE-2026-31808 · GHSA-5v7r-6r5c-r473

LOW 30

file-type detects the file type of a file, stream, or data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00369 Published 2026-03-10 Partial fix · 21.3.1 CWE-835

TI-2022-16660 CVE-2022-36313 · GHSA-mhxj-85r3-2x55

LOW 25

An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00406 Published 2022-07-21 Partial fix · 16.5.4, 17.1.3 CWE-835