Vulnerability	Vulnerable Version
H Use After Free sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images Affected versions of this package are vulnerable to Use After Free in `entity_insert()` and the entity map held on `XmlState`, which is shared between the outer parse and a recursive XInclude, so inserting an entity whose name already exists replaces the first entry and its `Drop` implementation calls `xmlFreeNode()` while the outer `xmlCtxtParseEntity()` is still using that 144 byte `xmlEntity`. An attacker can corrupt process memory by supplying an SVG document whose `xi:include` pulls in another document redefining an entity that is already active. This requires the application to parse attacker supplied SVG with XInclude processing reached, and the entity names must collide across the outer document and the included one. How to fix Use After Free? Upgrade `sharp` to version 0.35.5 or higher.	<0.35.5

Use After Free

sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images

Affected versions of this package are vulnerable to Use After Free in entity_insert() and the entity map held on XmlState, which is shared between the outer parse and a recursive XInclude, so inserting an entity whose name already exists replaces the first entry and its Drop implementation calls xmlFreeNode() while the outer xmlCtxtParseEntity() is still using that 144 byte xmlEntity. An attacker can corrupt process memory by supplying an SVG document whose xi:include pulls in another document redefining an entity that is already active. This requires the application to parse attacker supplied SVG with XInclude processing reached, and the entity names must collide across the outer document and the included one.

How to fix Use After Free?

Upgrade sharp to version 0.35.5 or higher.

<0.35.5

Go back to all versions of this package