canvas@1.2.7 vulnerabilities

Canvas graphics API backed by Cairo

Direct Vulnerabilities

Known vulnerabilities in the canvas package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Denial of Service (DoS)

canvas is a Cairo-backed Canvas implementation for Node.js.

Affected versions of this package are vulnerable to Denial of Service (DoS). Processing malicious JPEGs or GIFs files could crash the node process.

How to fix Denial of Service (DoS)?

Upgrade canvas to version 1.6.10 or higher.

<1.6.10