file-type vulnerabilities (npm)

3 vulnerabilities.

• file-type npm file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry CVE-2026-32630 Fix available 5.3 MediumMarch 13, 2026
• file-type npm file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header CVE-2026-31808 Fix available 5.3 MediumMarch 10, 2026
• file-type npm file-type vulnerable to Infinite Loop via malformed MKV file CVE-2022-36313 Fix available 5.5 MediumJuly 21, 2022