Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/opencv-contrib-python-headless@3.4.5.20
purl pkg:pypi/opencv-contrib-python-headless@3.4.5.20
Next non-vulnerable version 4.8.1.78
Latest non-vulnerable version 4.8.1.78
Risk 4.0
Vulnerabilities affecting this package (11)
Vulnerability Summary Fixed by
VCID-2ds9-7qg8-b3aa
Aliases:
CVE-2019-16249
GHSA-x3rm-644h-67m8
4.1.2.30
Affected by 3 other vulnerabilities.
VCID-2zx5-u81r-xfar
Aliases:
CVE-2019-19624
GHSA-jggw-2q6g-c3m6
4.1.0.25
Affected by 10 other vulnerabilities.
VCID-7g3v-p4h5-pufg
Aliases:
CVE-2019-14491
GHSA-fm39-cw8h-3p63
3.4.7.28
Affected by 9 other vulnerabilities.
4.1.1.26
Affected by 5 other vulnerabilities.
VCID-czcn-zgmz-b7fq
Aliases:
CVE-2019-5063
GHSA-m6vm-8g8v-xfjh
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability.
4.1.1.26
Affected by 5 other vulnerabilities.
VCID-jr8q-eaze-8yff
Aliases:
CVE-2019-5064
GHSA-q799-q27x-vp7w
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker can provide a specially crafted file to trigger this vulnerability.
4.2.0.32
Affected by 2 other vulnerabilities.
VCID-m2dt-hqz3-mfg5
Aliases:
CVE-2019-14493
GHSA-3448-vrgh-85xr
4.1.1.26
Affected by 5 other vulnerabilities.
VCID-nvqy-vqv1-1ycn
Aliases:
CVE-2019-9423
GHSA-8849-5h85-98qw
4.1.2.30
Affected by 3 other vulnerabilities.
VCID-tfqy-zten-x7fa
Aliases:
CVE-2019-15939
GHSA-hxfw-jm98-v4mq
4.1.1.26
Affected by 5 other vulnerabilities.
VCID-wvyj-dru7-cqam
Aliases:
GHSA-w2pj-9cgh-mq2c
opencv-contrib-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
4.8.1.78
Affected by 0 other vulnerabilities.
VCID-x7d2-e2cd-v3c9
Aliases:
CVE-2019-14492
GHSA-fw99-f933-rgh8
3.4.7.28
Affected by 9 other vulnerabilities.
4.1.1.26
Affected by 5 other vulnerabilities.
VCID-zgsp-nutp-ekdm
Aliases:
PYSEC-2023-182
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.
4.8.1.78
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T19:38:26.601384+00:00 GitLab Importer Affected by VCID-wvyj-dru7-cqam https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/GHSA-w2pj-9cgh-mq2c.yml 38.6.0
2026-06-12T17:49:27.675648+00:00 GitLab Importer Affected by VCID-7g3v-p4h5-pufg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/CVE-2019-14491.yml 38.6.0
2026-06-12T17:49:21.974341+00:00 GitLab Importer Affected by VCID-nvqy-vqv1-1ycn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/CVE-2019-9423.yml 38.6.0
2026-06-12T17:49:17.690281+00:00 GitLab Importer Affected by VCID-2ds9-7qg8-b3aa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/CVE-2019-16249.yml 38.6.0
2026-06-12T17:49:16.975919+00:00 GitLab Importer Affected by VCID-czcn-zgmz-b7fq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/CVE-2019-5063.yml 38.6.0
2026-06-12T17:49:10.900869+00:00 GitLab Importer Affected by VCID-x7d2-e2cd-v3c9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/CVE-2019-14492.yml 38.6.0
2026-06-12T17:49:09.024766+00:00 GitLab Importer Affected by VCID-m2dt-hqz3-mfg5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/CVE-2019-14493.yml 38.6.0
2026-06-12T17:49:08.451608+00:00 GitLab Importer Affected by VCID-jr8q-eaze-8yff https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/CVE-2019-5064.yml 38.6.0
2026-06-12T17:49:06.677305+00:00 GitLab Importer Affected by VCID-tfqy-zten-x7fa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/CVE-2019-15939.yml 38.6.0
2026-06-12T17:49:05.831423+00:00 GitLab Importer Affected by VCID-2zx5-u81r-xfar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/opencv-contrib-python-headless/CVE-2019-19624.yml 38.6.0
2026-06-12T04:22:32.941420+00:00 Pypa Importer Affected by VCID-zgsp-nutp-ekdm https://github.com/pypa/advisory-database/blob/main/vulns/opencv-contrib-python-headless/PYSEC-2023-182.yaml 38.6.0
2026-06-11T21:00:45.074037+00:00 PyPI Importer Affected by VCID-zgsp-nutp-ekdm https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0