Skip to content
OpenAdvisories

Package · PyPI

webp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    GHSA-f9pm-4g9p-6vm3

    Bundled libwebp in pywebp vulnerable

    ### Impact pywebp versions before v0.3.0 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. The vulnerability was a heap buffer overflow which allowed a remote attacker to perform an out of bounds memory write. ### Patches The problem ha…

    webp PyPI