StackRadar

CVE-2023-1999

High

Advisory

Published 8 May 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
367
of 17,781 indexed, latest versions
Container images
324
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: libwebp security update

Carried by container images the latest versions of 367 of 17,781 indexed charts deploy, on 324 images.

Affected packageAffected versionsFixed inImages
libwebpapk1.2.2-r0, 1.2.3-r0, 1.2.4-r11.2.2-r1, 1.2.3-r1, 1.2.4-r254
libwebprpm1.0.0-1.el8, 1.0.0-3.el8_40:1.0.0-7.el8_2, 0:1.0.0-8.el8_72
libwebpdeb0.4.4-1, 0.6.1-2, 0.6.1-2.1, 0.6.1-2+deb10u1+3 more0.4.4-1ubuntu0.1~esm2, 0.6.1-2.1+deb11u1, 0.6.1-2+deb10u2, 0.6.1-2ubuntu0.18.04.2+2 more267
mozjs68deb68.6.0-1ubuntu1no fix listed1
OSV records
ALPINE-CVE-2023-1999RHSA-2023:2072RHSA-2023:2076UBUNTU-CVE-2023-1999DLA-3439-1DSA-5408-1
Also known as
RHSA-2023:2084, USN-6078-1, USN-6078-2

Charts affected

367 by stars
ChartLatestAffected imagesRadar Score
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-nginx:latest4473ce50435e
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-nginx:latestf449b82ce9d6
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx:lateste0c5f8a95098
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-nginx:latest42c75ea8082c
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2

Open the chart page →

7,429
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2

Open the chart page →

3,129
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1

Open the chart page →

2,132
queryservice-uiwbstack0.2.01 of 1See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
libwebp@1.2.2-r0
1.2.2-r1

Open the chart page →

1,996
uiwbstack0.4.01 of 1See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/wbstack/ui:3.94b01f67faadf1
libwebp@1.2.2-r0
1.2.2-r1

Open the chart page →

1,523
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2

Open the chart page →

2,670
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1

Open the chart page →

2,021
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
libwebp@1.2.2-r0
1.2.2-r1
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
libwebp@1.2.2-r0
1.2.2-r1

Open the chart page →

16,083
myfirstchartww-helm-charts-repo0.1.01 of 1See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:0.1.0205961b09a80
libwebp@0.6.1-2
0.6.1-2+deb10u2

Open the chart page →

1,138
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1

Open the chart page →

1,838
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-1999.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
libwebp@0.6.1-2
0.6.1-2+deb10u2

Open the chart page →

1,138

Container images carrying it

324 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
libwebp@0.6.1-2
0.6.1-2+deb10u2
33
pnnlmiscscripts/anaconda:20201029-1700-nginx-105827b9efa7b
libwebp@1.2.3-r0
1.2.3-r1
10
library/nginx:1.21:1.21.62bcabc23b454
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
6
library/nginx:1.19df13abe416e3
libwebp@0.6.1-2
0.6.1-2+deb10u2
5
ghcr.io/stacksimplify/kubenginx:0.1.0:1.0.0205961b09a80
libwebp@0.6.1-2
0.6.1-2+deb10u2
5
ciscolabs/rtsp-client:latesta7b60ec88285
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.2
3
ciscolabs/rtsp-server:latestb59fc10bb821
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.2
3
conduction/openwebconcept:4.8ee2121b569ac
libwebp@0.6.1-2
0.6.1-2+deb10u2
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
libwebp@0.4.4-1
0.4.4-1ubuntu0.1~esm2
3
phpmyadmin/phpmyadmin:5.2.0ae6dadd9cf3c
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
3
pnnlmiscscripts/anaconda9:1683907016.7470503-nginx-19a2fe06a1472
libwebp@1.2.4-r1
1.2.4-r2
3
ghcr.io/stacksimplify/kubenginx:0.4.0:4.0.0279eb855e6c7
libwebp@0.6.1-2
0.6.1-2+deb10u2
3
amancevice/superset:0.35.212a0a9e66550
libwebp@0.6.1-2
0.6.1-2+deb10u2
2
blakeblackshear/frigate:0.11.18330b0a265b8
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
2
dependencytrack/frontend:4.6.124422d762e08
libwebp@1.2.3-r0
1.2.3-r1
2
ldapaccountmanager/lam:8.0.1d46cf25d1dda
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
2
library/nginx:1.176fff55753e3b
libwebp@0.6.1-2
0.6.1-2+deb10u2
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
libwebp@0.6.1-2
0.6.1-2+deb10u2
2
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
libwebp@0.6.1-2
0.6.1-2+deb10u2
2
openmf/community-app:latest496b60a51f28
libwebp@0.6.1-2
0.6.1-2+deb10u2
2
passbolt/passbolt:3.4.0-ce-non-root655547e17263
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
2
pecan/bety:5.4.1f825d480cd62
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
2
phpipam/phpipam-cron:v1.5.2f770577cb946
libwebp@1.2.2-r0
1.2.2-r1
2
phpipam/phpipam-www:v1.5.23c6fd1332aeb
libwebp@1.2.2-r0
1.2.2-r1
2
privatebin/pdo:1.3.500466418121c
libwebp@1.2.2-r0
1.2.2-r1
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2
2
taigaio/taiga-front:latest570c8792ce80
libwebp@1.2.4-r1
1.2.4-r2
2
weblate/weblate:4.2.2-169c160d37a3c
libwebp@0.6.1-2
0.6.1-2+deb10u2
2
yzhou442/equiz:latesta3f7ca69e28d
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
libwebp@1.2.2-2
1.2.2-2ubuntu0.22.04.1
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
libwebp@1.2.2-2
1.2.2-2ubuntu0.22.04.1
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.2
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.2
2
quay.io/iver-wharf/wharf-web:v1.6.2dc5d1ed91c26
libwebp@1.2.2-r0
1.2.2-r1
2
afrank/mozalert-controller:latestd463c37b08d7
libwebp@0.6.1-2
0.6.1-2+deb10u2
1
ahmedinfraplus/simple-app:STAGINGc50e6e81a637
libwebp@1.2.3-r0
1.2.3-r1
1
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
1
aidasi/swpspa:v1-1-net6-k8s-test-betadee4ec566312
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.2
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
1
anonaddy/anonaddy:0.12.3957a95565166
libwebp@1.2.3-r0
1.2.3-r1
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
1
archish27/python-fastapi-postgres:latest6610071a2101
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u1
1
arfath29/3-tier-app-backend:latestee0750b18406
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2
1
arfath29/3-tier-app-frontend:latest384b3e377f47
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2
1
arturisimo/server-urjc:v1.0d8dc4430531e
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u2
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
libwebp@0.6.1-2
0.6.1-2+deb10u2
1
asonix/pictrs:0.4.0-beta.19480d36cd97e5
libwebp@1.2.3-r0
1.2.3-r1
1
assistiot/fl_orchestrator:ui-latest20338b353aaf
libwebp@1.2.3-r0
1.2.3-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.