npm / probe-image-size
probe-image-size
What changed in probe-image-size 7, from its official release notes, upgrade guides and advisories. Also covers @types/probe-image-size. Sources checked 2026-10-27.
2 breaking3 security2 new APIs and options6 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initprobe-image-size 713 changes
Breaking changes 2
Added limits on image variants and item locations.
SVG header parsing is improved, and the header is now searched for only within the first 10K.
Security 3
Fixed possible high CPU and memory usage in JPEG, WebP, AVIF and SVG parsers.
probe-image-size: Quadratic-time Denial of Service in the SVG Parser
Fixed a possible denial-of-service vulnerability in the SVG parser.
New APIs and options 2
Adds support for probing AVIF, HEIC, and HEIF images.
Adds orientation information to the probe results.
Fixes and other changes 6
Improved BMP format handling.
Added a bounds check to the sync ICO parser.
Ensured width and height are positive.
Fixed handling of the maximum number of redirects.
Fixed readXXX helpers in sync parsers.
Fixed the WebP sync parser to align with the streamed version.