CVE-2026-58586

Image::WebP ( Perl, up to version 0.2 ) bundles libwebp 0.3.0, not the system libwebp. The bundled decoder is used when decoding untrusted WebP images, and upgrading the system libwebp does not remediate this. The bundled libwebp 0.3.0 contains multiple known vulnerabilities, including CVE-2023-4...