Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:cargo/webp@0.1.0
purl pkg:cargo/webp@0.1.0
Next non-vulnerable version 0.2.6
Latest non-vulnerable version 0.3.1
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-vdzj-kqfy-d3b7
Aliases:
CVE-2023-4863
GHSA-j7hp-h8jx-5ppr
libwebp: OOB write in BuildHuffmanTable Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.
0.2.6
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T02:52:44.738166+00:00 GHSA Importer Affected by VCID-vdzj-kqfy-d3b7 https://github.com/advisories/GHSA-j7hp-h8jx-5ppr 38.4.0
2026-04-11T14:21:28.819281+00:00 GHSA Importer Affected by VCID-vdzj-kqfy-d3b7 https://github.com/advisories/GHSA-j7hp-h8jx-5ppr 38.3.0
2026-04-02T15:02:55.981518+00:00 GHSA Importer Affected by VCID-vdzj-kqfy-d3b7 https://github.com/advisories/GHSA-j7hp-h8jx-5ppr 38.1.0