npm vulnerability intelligence

file-type NPM Package
Vulnerability Check

Detect the file type of a file, stream, or data

High severity MIT v22.0.1
Vulnerability Analysis OSV Live

file-type

v22.0.1 · MIT · 53,256,488 dl/wk

Advisory Breakdown

Critical 0
High 1
Moderate 2
Low 0

Severity Rating

High severity

3 advisories

High severity

Weekly downloads

53,256,488

Total advisories

3

Latest version

22.0.1

License

MIT

Advisories Package Info Runtime

Known advisories

OSV records for the npm ecosystem

3
GHSA-5v7r-6r5c-r473 CVE-2026-31808 moderate

file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header

Affected: >=13.0.0 <21.3.1 Fixed in: 21.3.1 Updated Mar 19, 2026
View source
GHSA-j47w-4g3g-c36v CVE-2026-32630 moderate

file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entry

Affected: >=20.0.0 <21.3.2 Fixed in: 21.3.2 Updated Mar 19, 2026
View source
GHSA-mhxj-85r3-2x55 CVE-2022-36313 high

file-type vulnerable to Infinite Loop via malformed MKV file

Affected: >=13.0.0 <16.5.4, >=17.0.0 <17.1.3 Fixed in: 16.5.4, 17.1.3 Updated Nov 8, 2023
View source

Checked Aug 12, 2026, 5:28 AM from npm and OSV.dev

Package metadata

From the npm registry

Package name
file-type
Ecosystem
npm
Latest version
22.0.1
License
MIT
Weekly downloads
53,256,488
Repository
Open repository

Remediation boundary

What RequestGuard does — and doesn't — cover

RequestGuard does not fix npm package vulnerabilities. Dependency remediation happens through package updates, patches, lockfile changes, and maintainer guidance. RequestGuard can help mitigate runtime abuse around exposed web and API flows while remediation is handled separately.

Signup flows
Login attempts
API traffic

Protect runtime flows →

Allow, challenge, review, and block decisions for exposed endpoints.

Data from npm registry and OSV.dev · Checked 8/12/2026, 5:28:49 AM