What’s Vulnerable › Products

sindresorhus file-type vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your sindresorhus file-type version is affected

Latest sindresorhus file-type vulnerabilities

• CVE-2026-32630 — file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry (CVSS 5.3)
• CVE-2026-31808 — file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header (CVSS 5.3)
• CVE-2022-36313 — (CVSS 5.5)