Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/11/16 5:14 p.m.167 views

sharp vulnerability in libwebp dependency CVE-2023-4863

Overview sharp uses libwebp to decode WebP images and versions prior to the latest 0.32.6 are vulnerable to the high severity https://github.com/advisories/GHSA-j7hp-h8jx-5ppr. Who does this affect? Almost anyone processing untrusted input with versions of sharp prior to 0.32.6. How to resolve...

8.8CVSS7.1AI score0.99735EPSS
SaveExploits9References3Affected Software1
Rows per page
Query Builder