Vulnerabilities - Image Sprites - Visual Studio Code | ReversingLabs Spectra Assure Community

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/06/24

Hide triaged

CVSS Score

CVE Identifier

Summary

Tags

critical

9.8

CVE-2021-3918

json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Exploits Exist

Fix Available

critical

9.8

CVE-2021-44906

Minimist is vulnerable to Prototype Pollution via the setKey function.

Exploits Exist

Fix Available

critical

9.4

CVE-2025-7783

form-data uses insufficiently random values, allowing HTTP Parameter Pollution (HPP) due to an issue in lib/form_data.js.

Exploits Exist

Fix Available

high

7.5

CVE-2020-7661

url-regex is vulnerable to Regular Expression Denial of Service via a very long string in String.test.

Exploits Exist

high

7.5

CVE-2020-7753

Package trim is vulnerable to Regular Expression Denial of Service via the trim function.

Exploits Exist

Fix Available

high

7.5

CVE-2022-21195

url-regex is vulnerable to Regular Expression Denial of Service (ReDoS) which can cause CPU usage to crash.

Exploits Exist

high

7.5

CVE-2022-24999

qs allows attackers to cause a Node process hang due to prototype pollution via an __proto__ key in the query string.

Exploits Exist

Fix Available

high

7.5

CVE-2022-25851

jpeg-js is vulnerable to Denial of Service (DoS) due to an infinite loop.

Exploits Exist

Fix Available

medium

6.5

CVE-2023-26136

tough-cookie is vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode.

Exploits Exist

Fix Available

medium

6.3

CVE-2025-15284

qs is vulnerable to improper input validation, allowing HTTP DoS via inconsistent arrayLimit enforcement for bracket notation.

Exploits Exist

Fix Available

Image Sprites

SAFE Assessment

Compliance

Security

Threats

Did you know...