probe-image-size vulnerabilities

CVEs whose affected-version data names the probe-image-size package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104861High· 7.5

today

probe-image-size gets image dimensions without downloading the entire file

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and lib/parse_stream/svg.js use the searching regular expression /<[-_.:a-zA-Z0-9][^>]*>/, which repeatedly scans to the en…

▾ Twilightnodeca · probe-image-sizevia NVD