# Install image-size-next with npm Community-maintained fork of image-size: get dimensions of any image file or buffer. Fixes CVE-2025-71329 and CVE-2025-71330 (DoS via infinite loops). Version 2.1.1 via npm; verified 2026-08-13. ## Install ```sh sudo av install npm:image-size-next ``` Additional install commands: ### Portable and language managers - npm (100%): ```sh npm install -g image-size-next ``` Evidence: local npm package metadata ## Package facts - **Package key:** npm:image-size-next - **Package manager:** npm - **Version:** 2.1.1 - **Source summary:** Community-maintained fork of image-size: get dimensions of any image file or buffer. Fixes CVE-2025-71329 and CVE-2025-71330 (DoS via infinite loops). - **Homepage:** - **Upstream docs:** - **Last updated:** 2026-08-13T17:05:02.514Z - **Generated:** 2026-09-19T06:45:57+00:00 ## Executables - image-size-next (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-09-19 - Package-manager version: 2.1.1 ## Security Notes No matching local secret-handling manifest was found for image-size-next. Package metadata is still published here so future coverage has a stable package URL. ## Related links - [Media and graphics packages](https://pkg.so/media-graphics-tools/) - Matched curated package taxonomy and local package facts. - [image-size](https://pkg.so/npm/image-size/) - Both packages work with overlapping file formats or content types. Shared terms: any, dimensions, file, get, image. - [image-dimensions](https://pkg.so/npm/image-dimensions/) - Both packages work with overlapping file formats or content types. Shared terms: dimensions, get, image. - [fix-react2shell-next](https://pkg.so/npm/fix-react2shell-next/) - Local package facts share a topical domain. Shared terms: 2025, cve, fixes, next. ## Sources - pkg.so package database - package relationship graph - cross-ecosystem install command graph