Sindresorhus

3 CVEs across 2 Sindresorhus products. Browse Sindresorhus vulnerabilities, severities, and proof-of-concept exploits.

Sindresorhus products with known CVEs

ProductCVEs
File-Type3
Sindresorhus/semver-Regex1
Sindresorhus CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-32630Medium5.32026-03-16file-type detects the file type of a file, stream, or data. From 20.0.0 to 21.3.1, a crafted ZIP file can trigger excessive memory growth during type detection…
CVE-2026-31808Medium5.32026-03-10file-type detects the file type of a file, stream, or data. Prior to 21.3.1, a denial of service vulnerability exists in the ASF (WMV/WMA) file type detection…
CVE-2022-36313Medium5.52022-07-21An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to g…
CVE-2021-3795High7.52021-09-15semver-regex is vulnerable to Inefficient Regular Expression Complexity