Sindresorhus file-type any version

An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack.

file-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entry

file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header