CVE-2026-114111 — RCE in Sharp before 0.35.5 via a librsvg dependency memory vulnerability
Sharp before version 0.35.5 bundles a librsvg dependency affected by memory-related vulnerability CVE-2026-96889. Under certain runtime-specific conditions, this may lead to code execution on glibc-based Linux.
CERT24