PatchTheCVElibvips vulnerabilities
Recent CVEs affecting libvips products. 4 tracked.
libvips has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-07-20. Highest priority: CVE-2026-33327 (score 29/100).
- CVE-2026-33327 HIGH 7.8 UPGRADE libvips is a fast image processing library with low memory needs
- CVE-2026-33328 MEDIUM 5.5 UPGRADE libvips is a fast image processing library with low memory needs
- CVE-2026-35590 MEDIUM 5.5 UPGRADE libvips is a fast image processing library with low memory needs
- CVE-2026-35591 HIGH 7.8 UPGRADE libvips is a fast image processing library with low memory needs
FAQ
How do I fix libvips vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libvips being exploited right now?
None of the tracked libvips CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libvips CVE should I patch first?
CVE-2026-33327 currently ranks highest (29/100): libvips is a fast image processing library with low memory needs.