sindresorhus vulnerabilities
4 published CVEs name sindresorhus among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119025
open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows
sindresorhus · open
High7.7 - CVE-2026-32630
file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry
sindresorhus · file-type
Medium5.3 - CVE-2026-31808
file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header
sindresorhus · file-type
Medium5.3 - CVE-2021-3795
Inefficient Regular Expression Complexity in sindresorhus/semver-regex
sindresorhus · sindresorhus/semver-regex
High7.5