· The Patch
The Patch
The Patch — July 22, 2026
sharp 0.35.0 pulls in a patched libvips to close four inherited image-decoding bugs — but the day's top score is @sigstore/oci's 9.6 credential-leak critical, fixed in 0.7.1, with fast-xml-parser's DoS (5.10.1) alongside.
Jul 22, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 22, 2026