# What changed in probe-image-size

> 13 changes in probe-image-size 7 from its official release notes, upgrade guides and advisories: 2 breaking, 3 security, 2 new APIs and options. Each one cited. Sources checked 2026-10-27. HTML: https://unstale.sh/npm/probe-image-size/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## probe-image-size 7

### Breaking changes

- Added limits on image variants and item locations. (7.5.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/55ab15a2ae532c21dbb4569344279faf3c2f4436/CHANGELOG.md#750---2026-10-26)
- SVG header parsing is improved, and the header is now searched for only within the first 10K. (7.4.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/64565c3c8b4b69655426cdfce250e6a93455c9da/CHANGELOG.md#740---2026-08-14)

### Security

- Fixed possible high CPU and memory usage in JPEG, WebP, AVIF and SVG parsers. (7.5.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/55ab15a2ae532c21dbb4569344279faf3c2f4436/CHANGELOG.md#750---2026-10-26)
- probe-image-size: Quadratic-time Denial of Service in the SVG Parser (7.4.0) — [security advisory](https://github.com/advisories/GHSA-GJJ5-9665-RWRC)
- Fixed a possible denial-of-service vulnerability in the SVG parser. (7.4.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/64565c3c8b4b69655426cdfce250e6a93455c9da/CHANGELOG.md#740---2026-08-14)

### New APIs and options

- Adds support for probing AVIF, HEIC, and HEIF images. (7.0.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/HEAD/CHANGELOG.md)
- Adds orientation information to the probe results. (7.0.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/HEAD/CHANGELOG.md)

### Fixes and other changes

- Improved BMP format handling. (7.3.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/64565c3c8b4b69655426cdfce250e6a93455c9da/CHANGELOG.md#730---2026-05-03)
- Added a bounds check to the sync ICO parser. (7.3.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/64565c3c8b4b69655426cdfce250e6a93455c9da/CHANGELOG.md#730---2026-05-03)
- Ensured width and height are positive. (7.3.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/64565c3c8b4b69655426cdfce250e6a93455c9da/CHANGELOG.md#730---2026-05-03)
- Fixed handling of the maximum number of redirects. (7.3.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/64565c3c8b4b69655426cdfce250e6a93455c9da/CHANGELOG.md#730---2026-05-03)
- Fixed readXXX helpers in sync parsers. (7.3.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/64565c3c8b4b69655426cdfce250e6a93455c9da/CHANGELOG.md#730---2026-05-03)
- Fixed the WebP sync parser to align with the streamed version. (7.3.0) — [release notes](https://github.com/nodeca/probe-image-size/blob/64565c3c8b4b69655426cdfce250e6a93455c9da/CHANGELOG.md#730---2026-05-03)