Sharp is a high-performance image-processing module for Node.js, commonly used to resize, convert, and optimize images in server-side applications. It is built on the libvips image-processing library and can process several formats, including SVG, depending on how it is configured.
Because Sharp may parse files supplied by users, it can form part of a server’s attack surface: vulnerabilities in the module or its underlying image libraries may put systems at risk when processing crafted input. Defenders should keep Sharp and its dependencies updated, check which formats and features are enabled, and validate or restrict untrusted uploads. In a framework image pipeline, verify the specific advisory and affected versions before concluding that a deployment is exposed.