Search for packages
Package details: pkg:cargo/webp@0.2.6
purl pkg:cargo/webp@0.2.6
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-pe8x-79nr-3qg4 Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild. *Note: This advisory was previously also tracked as CVE-2023-5129.* CVE-2023-4863
GHSA-j7hp-h8jx-5ppr

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T13:42:05.735317+00:00 GHSA Importer Fixing VCID-pe8x-79nr-3qg4 https://github.com/advisories/GHSA-j7hp-h8jx-5ppr 37.0.0