`sharp`

Ecosystem:
npm

Package URL:
pkg:npm/sharp

Total PRs:
37,460 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
7,743 repositories

Unique Repos (30 days):
113 repositories

Security Advisories

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

GHSA-f88m-g3jw-g9cj HIGH published 8 days ago • updated 8 days ago

### Impact A number of vulnerabilities, two rated as "High" severity using CVSSv4, have been discovered and fixed in the upstream libvips dependen...

sharp vulnerable to Command Injection in post-installation over build environment

GHSA-gp95-ppv5-3jc5 CVE-2022-29256 MODERATE published about 4 years ago • updated about 3 hours ago

There's a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. ...

0.34.5 → 0.35.3 Minor PR

Open 1 day ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates

maiconramos/robo-multipost #169

0.33.5 → 0.35.0 Minor PR

Closed 2 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

EvanCaoJt/evan-quartz #13

0.34.5 → 0.35.3 Minor PR

Open 2 days ago 1 comment

chore(deps): bump the minors group across 1 directory with 22 updates

LeonardoPS1/consultorio-medico #29

0.34.5 → 0.35.3 Minor PR

Closed 2 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 20 updates

Per-Aspera-LLC/stackwright #548

0.34.5 → 0.35.3 Minor PR

Open 2 days ago 2 comments

deps: bump the pnpm-workspace group across 1 directory with 53 updates

nerdchanii/mastersrunners #52

0.34.5 → 0.35.3 Minor PR

Open 3 days ago 3 comments

Bump sharp and wrangler

Yodapp/bygg-landing #2

0.34.5 → 0.35.2 Minor PR

Open 3 days ago 1 comment

chore(deps): bump sharp from 0.34.5 to 0.35.2 in /infra/watchdog in the npm_and_yarn group across 1 directory

wildcaresolutions/rescue-bot #172

0.34.5 → 0.35.2 Minor PR

Open 4 days ago 1 comment

chore(deps): bump the npm-patch group across 1 directory with 3 updates

NicolasKrusche/Corelyx #33

0.35.0 → 0.35.3 Patch PR

Open 4 days ago 3 comments

build(deps): bump sharp and astro

SecureLayer/tmp #16

0.34.5 → 0.35.3 Minor PR

Open 4 days ago 1 comment

Bump the minor-updates group across 1 directory with 16 updates

tihuzhi/Twilight-astro-blog #12

0.34.5 → 0.35.3 Minor PR

Open 5 days ago 1 comment

chore(deps): bump sharp from 0.34.5 to 0.35.0

gdgutm/website #605

0.34.5 → 0.35.0 Minor PR

Open 5 days ago 2 comments

build(deps): bump sharp from 0.33.5 to 0.35.0 in /website

pedrotroccoli/1o1-utils #198

0.33.5 → 0.35.0 Minor PR

Open 5 days ago 1 comment

chore(deps): bump sharp from 0.34.5 to 0.35.0

Dustin4444/openclaw #17

0.34.5 → 0.35.0 Minor PR

Open 5 days ago 6 comments

chore(deps): bump sharp from 0.34.5 to 0.35.0

Kuurow/NextJsWeb #12

0.34.5 → 0.35.0 Minor PR

Open 5 days ago 1 comment

Bump the production-dependencies group across 1 directory with 24 updates

m-mattia-m/quartz-5-notes-bug-report #12

0.34.5 → 0.35.3 Minor PR

Closed 6 days ago 1 comment

Bump sharp from 0.34.5 to 0.35.3

yonatankarp/ai-radar #15

0.34.5 → 0.35.3 Minor PR

Closed 6 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 3 updates

nastech-ai/NasTech-Agent #54

0.34.5 → 0.35.3 Minor PR

Closed 7 days ago 6 comments

chore(deps): bump sharp from 0.34.5 to 0.35.3 in /scripts/whatsapp-bridge

Manzela/Autonomous-Agent-2.0 #38

0.34.5 → 0.35.3 Minor PR

Open 7 days ago 1 comment

chore(deps): bump the all-dependencies group across 1 directory with 54 updates

Clarion1631/probuild #219

0.34.5 → 0.35.3 Minor PR

Closed 7 days ago 2 comments

chore(deps): bump sharp from 0.34.5 to 0.35.3 in /audit/fixtures/PAN016-ui-framework/good in the npm_and_yarn group across 1 directory

pancratius-org/pancratius #121

0.34.5 → 0.35.3 Minor PR

Closed 8 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

Newphakhin/new-nA #11

0.34.5 → 0.35.3 Minor PR

Closed 8 days ago 2 comments

chore(deps-dev): bump the dev-dependencies group across 1 directory with 14 updates

sugukurukabe/japan-real-estate-intel-mcp #32

0.34.5 → 0.35.3 Minor PR

Open 9 days ago 1 comment

Bump the minor-updates group across 1 directory with 12 updates

InKeey/Blog #19

0.34.5 → 0.35.3 Minor PR

Open 9 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

forageopen/forage #10

0.34.5 → 0.35.3 Minor PR

Closed 10 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

dungle14/n3ss #9

0.34.5 → 0.35.3 Minor PR

Closed 10 days ago 1 comment

chore(deps): Bump the minor-and-patch group across 1 directory with 20 updates

mbrktdaddy/bossdaddy-v2 #16

0.34.5 → 0.35.3 Minor PR

Open 10 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

ben-jaynes/benjaynes.com #12

0.34.5 → 0.35.3 Minor PR

Closed 10 days ago 1 comment

chore(deps): bump the minor-updates group across 1 directory with 13 updates

yyhhkya/fuwari #160

0.34.5 → 0.35.3 Minor PR

Open 10 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

mokori4242/notes #9

0.34.5 → 0.35.3 Minor PR

Closed 10 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

knink-owo/myblog #10

0.34.5 → 0.35.3 Minor PR

Closed 10 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 18 updates

x-matt/x-matt.github.io #43

0.34.5 → 0.35.3 Minor PR

Closed 10 days ago 1 comment

Bump the production-dependencies group across 1 directory with 25 updates

literallyfirefly/HSMP-Wiki #6

0.34.5 → 0.35.3 Minor PR

Open 11 days ago 3 comments

chore(deps): bump the production-dependencies group with 29 updates

Mocoss/PythonNotes #2

0.34.5 → 0.35.3 Minor PR

Closed 11 days ago 1 comment

chore(deps): bump the minor-and-patch group with 40 updates

themios/dealerwyze-app #3

0.34.5 → 0.35.3 Minor PR

Open 13 days ago 1 comment

Bump the production-dependencies group across 1 directory with 21 updates

criticofpoliticaleconomy/CoPE #3

0.34.5 → 0.35.3 Minor PR

Closed 13 days ago 1 comment

Bump the minor-updates group across 1 directory with 15 updates

E5-lab/Fuwari #2

0.34.5 → 0.35.3 Minor PR

Open 14 days ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 3 updates

steverobertsuk/SteveRoberts.me #11

0.35.1 → 0.35.3 Patch PR

Closed 15 days ago 3 comments

[Docs Site] Bump the non-major group across 1 directory with 40 updates

weaverite/cloudflare-docs #6

0.34.5 → 0.35.3 Minor PR

Open 15 days ago 3 comments

chore(deps): bump the production-dependencies group across 1 directory with 24 updates

jonnaalive/renewable-energy-report #6

0.34.5 → 0.35.3 Minor PR

Closed 15 days ago 2 comments

chore(deps-dev): bump the dev-dependencies group across 1 directory with 16 updates

william7865/forkmap #79

0.35.2 → 0.35.3 Patch PR

Open 16 days ago 1 comment

chore(deps): bump the root-devtools group across 1 directory with 74 updates

songyinggoh/renovation-agent-monorepo #130

0.34.5 → 0.35.3 Minor PR

Open 16 days ago 3 comments

chore(deps): bump the production-dependencies group with 14 updates

YitengDang/IMPSS_2026_notes #2

0.34.5 → 0.35.3 Minor PR

Closed 17 days ago 1 comment

Bump the patch-updates group across 1 directory with 21 updates

Aron1010/Aron-Blog #4

0.35.2 → 0.35.3 Patch PR

Closed 17 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 24 updates

DanBrazelton/danbrazelton-quartz-site #4

0.34.5 → 0.35.3 Minor PR

Closed 17 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

LeslieChenZ/MTH361_1 #7

0.34.5 → 0.35.3 Minor PR

Closed 17 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 28 updates

will-opz/opskitpro-public #8

0.34.5 → 0.35.3 Minor PR

Closed 18 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

pocper1/llm-wiki #3

0.34.5 → 0.35.3 Minor PR

Closed 19 days ago 2 comments

build(deps): bump the production-dependencies group across 1 directory with 29 updates

attentiontt/att-ob #5

0.34.5 → 0.35.3 Minor PR

Closed 20 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 24 updates

angelogalanti/notes #6

0.34.5 → 0.35.3 Minor PR

Closed 20 days ago 1 comment

Package Details

Name:	`sharp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/sharp`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 2

MODERATE 1

View All npm Advisories

Package Information

Description:

High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images

Repository:	https://github.com/lovell/sharp
Homepage:	https://sharp.pixelplumbing.com
Latest Release:	`0.34.2` about 1 year ago
Dependent Repos:	178,353
Dependent Packages:	4,168
Downloads:	57,954,003
Ranking:	Top 0.0825% by dependent repos Top 0.0738% by downloads Top 0.0239% by dependent pkgs

PR Status

Open 17,783 (47.5%)

Merged 776 (2.1%)

Closed 16,066 (42.9%)

PR Types

Minor 7,618 (20.3%)

Patch 27,000 (72.1%)

Removal 6 (0.0%)

sharp

Security Advisories

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

sharp vulnerable to Command Injection in post-installation over build environment

sharp vulnerability in libwebp dependency CVE-2023-4863

Recent PRs

Package Details

Security Advisories

3

Package Information

PR Status

PR Types

`sharp`