pkg:npm/file-type

3 total CVEsHIGH1MEDIUM2

✅ Check your installed version

All known vulnerabilities

  • HIGH7.5CVE-2022-36313file-type vulnerable to Infinite Loop via malformed MKV file
    >= 13.0.0, < 16.5.4
  • MEDIUM5.3CVE-2026-32630file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entry
    >= 20.0.0, < 21.3.2
  • MEDIUM5.3CVE-2026-31808file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header
    >= 13.0.0, < 21.3.1