file-type vulnerable to Infinite Loop via malformed MKV file

[marcoaureliocardoso]

Dependabot alert:
"An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack."

Relative question on Stack Overflow:
https://stackoverflow.com/questions/73096453/npm-showing-severity-vulnerabilities-laravel-in-ubuntu-18-04-lts

[hkjeffchan]

I am maintaining a new version at https://github.com/hkjeffchan/imagemin which includes cjs support and updated dependency if you are interested

[sindresorhus]

Should be fixed now.