`sharp`

Ecosystem:
npm

Package URL:
pkg:npm/sharp

Total PRs:
41,491 Dependabot PRs

Latest PR:
about 5 hours ago

Unique Repositories:
11,313 repositories

Unique Repos (30 days):
185 repositories

Security Advisories

sharp : Vulnerability in librsvg dependency CVE-2026-96889

GHSA-wq5f-xc86-pv6w HIGH published about 1 month ago • updated about 1 month ago

### Impact A memory-related vulnerability has been discovered and fixed in the upstream librsvg dependency. When certain runtime-specific conditio...

sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

GHSA-rgj7-g3m4-5g8c HIGH published 2 months ago • updated about 1 month ago

### Impact A number of vulnerabilities, two rated as "Critical" severity using CVSSv3, have been discovered and fixed in the upstream libheif depen...

sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

GHSA-f88m-g3jw-g9cj HIGH published 4 months ago • updated about 1 month ago

### Impact A number of vulnerabilities, two rated as "High" severity using CVSSv4, have been discovered and fixed in the upstream libvips dependen...

sharp vulnerable to Command Injection in post-installation over build environment

GHSA-gp95-ppv5-3jc5 CVE-2022-29256 MODERATE published over 4 years ago • updated 3 days ago

There's a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. ...

sharp vulnerability in libwebp dependency CVE-2023-4863

GHSA-54xq-cgqr-rpm3 HIGH published almost 3 years ago • updated about 1 month ago

## Overview sharp uses libwebp to decode WebP images and versions prior to the latest 0.32.6 are vulnerable to the high severity https://github.co...

Recent PRs

RSS Feed

Javascript dependency: Bump the web-javascript-minor-and-patch group across 1 directory with 42 updates

Vermillion-Develop/pgadmin4_ru #39

0.35.4 → 0.35.5 Patch PR

Open about 5 hours ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 19 updates

kimhero118/my-solidarity-wiki #10

0.35.4 → 0.35.5 Patch PR

Open about 9 hours ago 1 comment

Bump the production-dependencies group across 1 directory with 19 updates

Archiwizator/matlab-obsidian-documentation #7

0.35.4 → 0.35.5 Patch PR

Open about 10 hours ago 1 comment

dependabot: bump the npm-deps group across 2 directories with 33 updates

open-circle/valibot #1743

0.34.5 → 0.35.5 Minor PR

Open about 11 hours ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 71 updates

OrangBiasayanginginBisa/portofolio #12

0.35.4 → 0.35.5 Patch PR

Open about 11 hours ago 1 comment

Bump the npm_and_yarn group across 1 directory with 11 updates

blueshift-gg/bpf.wtf #9

0.34.5 → 0.35.5 Minor PR

Open about 18 hours ago 1 comment

Bump the npm_and_yarn group across 1 directory with 21 updates

StankySpence/docs #1

0.33.5 → 0.35.5 Minor PR

Open about 20 hours ago 2 comments

chore(deps): bump sharp from 0.35.3 to 0.35.5 in /dashboard

AIKAGRYA/dharma_swarm #1540

0.35.3 → 0.35.5 Patch PR

Open about 24 hours ago 3 comments

chore(deps): bump sharp and next in /client

poteto317/draw-my-map #1

0.34.5 → 0.35.5 Minor PR

Closed 1 day ago 2 comments

Bump the minor-updates group across 1 directory with 16 updates

vtnam207/vtnam207.github.io #18

0.34.5 → 0.35.5 Minor PR

Open 1 day ago 2 comments

chore(deps): bump the minor-updates group across 1 directory with 23 updates

AiDebug123/my-blog1 #6

0.34.5 → 0.35.5 Minor PR

Open 1 day ago 1 comment

chore(deps): bump sharp from 0.35.4 to 0.35.5

eser/stack #192

0.35.4 → 0.35.5 Patch PR

Closed 2 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

RemyLoveLogicAI/Auto-MonetizationGenerator #47

0.35.4 → 0.35.5 Patch PR

Open 3 days ago 12 comments

build(deps-dev): bump the npm-development group with 2 updates

amazing-soft-dev/rovellestudio #77

0.34.5 → 0.35.5 Minor PR

Open 3 days ago 2 comments

Bump the compatible-packages group across 1 directory with 233 updates

natbaca/natbaca.github.io #50

0.35.4 → 0.35.5 Patch PR

Closed 3 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 12 updates

DevZeppelin/mza-cars #2

0.33.5 → 0.35.5 Minor PR

Open 4 days ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 23 updates

ahmed1234boufous-hub/Firefly-v1 #34

0.35.3 → 0.35.5 Patch PR

Closed 5 days ago 2 comments

chore(deps): bump the production-minor-patch group across 1 directory with 9 updates

brizatechstudio/brisabese #30

0.35.3 → 0.35.5 Patch PR

Open 5 days ago 1 comment

chore(deps-dev): bump the minor-and-patch group across 1 directory with 29 updates

twangodev/twangodev #139

0.35.3 → 0.35.5 Patch PR

Open 5 days ago 2 comments

chore(deps-dev): bump sharp from 0.35.4 to 0.35.5

csuzngjh/principles #2437

0.35.4 → 0.35.5 Patch PR

Open 5 days ago 3 comments

chore(deps): bump the minor-updates group across 1 directory with 23 updates

iStarrySummer/iStarrySummer.github.io #5

0.34.5 → 0.35.5 Minor PR

Closed 5 days ago 1 comment

chore(deps):(deps): Bump the production-dependencies group in /backend with 29 updates

Abenezer1244/YWMESSAGING #53

0.34.5 → 0.35.5 Minor PR

Open 6 days ago 1 comment

Bump the all-deps group across 1 directory with 44 updates

marcolamaia/MarcFlow #9

0.34.5 → 0.35.5 Minor PR

Open 6 days ago 1 comment

Bump the minor-and-patch group across 1 directory with 33 updates

gautamankul/OpenWhastapp #22

0.35.4 → 0.35.5 Patch PR

Open 6 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 16 updates

blikthepro/DELTATHETA #13

0.35.4 → 0.35.5 Patch PR

Closed 7 days ago 1 comment

Bump the production-dependencies group across 1 directory with 16 updates

onghuilong-dotcom/Rosiliana33 #8

0.35.4 → 0.35.5 Patch PR

Closed 7 days ago 1 comment

Bump the production-dependencies group across 1 directory with 16 updates

jsebastianh993-web/GrafoPostcuali #8

0.35.4 → 0.35.5 Patch PR

Closed 7 days ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 15 updates

Nahidul-Islam-Siam/next-template-main #1

0.34.4 → 0.35.5 Minor PR

Closed 8 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 16 updates

yd828kim-png/my-solidarity-wiki #8

0.35.4 → 0.35.5 Patch PR

Closed 8 days ago 2 comments

Bump the production-dependencies group across 1 directory with 16 updates

Aditya725wu/Aadi-Brain #11

0.35.4 → 0.35.5 Patch PR

Open 8 days ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 23 updates

Melusine-ichnose/blog #19

0.35.4 → 0.35.5 Patch PR

Open 8 days ago 1 comment

Bump the production-dependencies group across 1 directory with 16 updates

ProtectorH0/Nash-Sled #8

0.35.4 → 0.35.5 Patch PR

Closed 8 days ago 1 comment

Bump the production-dependencies group across 1 directory with 69 updates

awaisamjad/quartz #10

0.34.5 → 0.35.5 Minor PR

Closed 8 days ago 2 comments

Bump the production-dependencies group across 1 directory with 16 updates

hawkins-dale/Portugal-quartz #10

0.35.4 → 0.35.5 Patch PR

Closed 8 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 12 updates

animesh-net/oreo-ai #55

0.34.5 → 0.35.5 Minor PR

Closed 8 days ago 2 comments

Bump the patch-updates group across 1 directory with 22 updates

MaYucong6/BralaBlog #29

0.35.3 → 0.35.5 Patch PR

Closed 9 days ago 1 comment

Bump the production-dependencies group across 1 directory with 16 updates

mementoice/wiki #7

0.35.4 → 0.35.5 Patch PR

Closed 9 days ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 21 updates

Thebugisme/Thebugisme.github.io #34

0.35.4 → 0.35.5 Patch PR

Closed 9 days ago 1 comment

chore(deps): bump the npm group with 6 updates

arkeep-io/arkeep-website #21

0.34.5 → 0.35.5 Minor PR

Closed 9 days ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 21 updates

Heart-of-cloud/Firefly #23

0.35.4 → 0.35.5 Patch PR

Closed 9 days ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 17 updates

M66Y/My-Blog #37

0.35.4 → 0.35.5 Patch PR

Closed 9 days ago 2 comments

Bump the production-dependencies group across 1 directory with 16 updates

gjwjq/portfolio-jay-kwon #6

0.35.4 → 0.35.5 Patch PR

Open 9 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 69 updates

dzhan008/my-garden #16

0.34.5 → 0.35.5 Minor PR

Closed 9 days ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 69 updates

mmatouschek/DGI_Resource_Vault #10

0.34.5 → 0.35.5 Minor PR

Closed 10 days ago 1 comment

chore(deps): bump sharp from 0.34.5 to 0.35.5 in the minor-and-patch group

vudaian24/portfolio-web #28

0.34.5 → 0.35.5 Minor PR

Open 10 days ago 2 comments

Bump the production-dependencies group across 1 directory with 16 updates

codehaan/garden #8

0.35.4 → 0.35.5 Patch PR

Closed 10 days ago 1 comment

Bump the minor-and-patch group with 39 updates

vincentluting/DeepDive #3

0.34.5 → 0.35.5 Minor PR

Closed 10 days ago 2 comments

Bump the production-dependencies group with 16 updates

mackenzie-ops/knowledge-base- #3

0.35.4 → 0.35.5 Patch PR

Closed 10 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 18 updates

g-kari/trip #19

0.34.5 → 0.35.5 Minor PR

Open 11 days ago 1 comment

Bump the production-dependencies group across 1 directory with 16 updates

wakkanairo/CGL_project #5

0.35.4 → 0.35.5 Patch PR

Closed 11 days ago 1 comment

Package Details

Name:	`sharp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/sharp`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 4

MODERATE 1

View All npm Advisories

Package Information

Description:

High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images

Repository:	https://github.com/lovell/sharp
Homepage:	https://sharp.pixelplumbing.com
Latest Release:	`0.34.2` over 1 year ago
Dependent Repos:	178,353
Dependent Packages:	4,168
Downloads:	57,954,003
Ranking:	Top 0.0825% by dependent repos Top 0.0738% by downloads Top 0.0239% by dependent pkgs

PR Status

Open 19,732 (47.6%)

Merged 776 (1.9%)

Closed 18,143 (43.7%)

PR Types

Minor 9,626 (23.2%)

Patch 29,016 (69.9%)

Removal 8 (0.0%)