Auth GatewayPlatform1 hop
- ApplicationAuth Gateway
Drawing the sheet
USY-2026-0115 · Heap buffer overflow · score 8.6
A malformed chunk header in a user-uploaded image overflows a fixed-size buffer in the native decoder. Reached by anything that resizes an upload.
SyntheticThis advisory is invented for the demonstration. sharp is a real package; nothing described here has been reported against it.
Every exposed application reaches this on a route of its own: no intermediate package is shared by more than one path. There is no single change here; each application has to move separately, or the ecosystem has to move first.
Declared directlyAuth Gateway. Nothing sits in between; the dependency is in the manifest.
Checkout Service
Inventory Sync