EUVD-2026-12139Published
file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-32630 · CVE overview and exploitation status
cve-program · CVE-2026-32630
- https://github.com/sindresorhus/file-type/security/advisories/GHSA-j47w-4g3g-c36v
- https://github.com/sindresorhus/file-type/commit/399b0f156063f5aeb1c124a7fd61028f3ea7c124
euvd · EUVD-2026-12139
- https://github.com/sindresorhus/file-type/security/advisories/GHSA-j47w-4g3g-c36v
- https://github.com/sindresorhus/file-type/commit/399b0f156063f5aeb1c124a7fd61028f3ea7c124
nvd · CVE-2026-32630
- https://github.com/sindresorhus/file-type/commit/399b0f156063f5aeb1c124a7fd61028f3ea7c124
- https://github.com/sindresorhus/file-type/security/advisories/GHSA-j47w-4g3g-c36v
osv · GHSA-j47w-4g3g-c36v
- https://github.com/sindresorhus/file-type/security/advisories/GHSA-j47w-4g3g-c36v
- https://nvd.nist.gov/vuln/detail/CVE-2026-32630
- https://github.com/sindresorhus/file-type/commit/399b0f156063f5aeb1c124a7fd61028f3ea7c124
- https://github.com/sindresorhus/file-type/commit/a155cd71323279de173c54e8c530d300d3854fdd
- https://github.com/sindresorhus/file-type
- https://github.com/sindresorhus/file-type/releases/tag/v21.3.2
Related changes
Linked by CVE identifierNo related changes are available here.