CVE-2023-4863

CriticalKEV

Advisory

Published 12 Sept 2023In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.6; base score, highest
EPSS: 1.000; 100th percentile
CISA KEV: Listed; since 13 Sept 2023
Charts affected: 454; of 17,781 indexed, latest versions
Container images: 416; deployed by those charts
Fix available: 5 of 5; affected packages

Red Hat Security Advisory: libwebp security update

Carried by container images the latest versions of 454 of 17,781 indexed charts deploy, on 416 images.

Affected package	Affected versions	Fixed in	Images
libwebprpm	1.0.0-3.el8_4	0:1.0.0-7.el8_4.1	1
libwebpdeb	0.6.1-2, 0.6.1-2.1, 0.6.1-2.1+deb11u1, 0.6.1-2+deb10u1+6 more	0.6.1-2.1+deb11u2, 0.6.1-2+deb10u3, 0.6.1-2ubuntu0.18.04.2+esm1, 0.6.1-2ubuntu0.20.04.3+2 more	300
libwebpapk	1.2.2-r0, 1.2.3-r0, 1.2.3-r1, 1.2.4-r1+2 more	1.2.2-r2, 1.2.3-r2, 1.2.4-r3, 1.3.1-r1	73
pillowpypi	2.6.1, 4.3.0, 5.0.0, 5.1.0+21 more	10.0.1	68
SkiaSharpnuget	2.80.2, 2.88.1-preview.71, 2.88.2, 2.88.3	2.88.6	6

OSV records: RHSA-2023:5222 ALPINE-CVE-2023-4863 DEBIAN-CVE-2023-4863 GHSA-j7hp-h8jx-5ppr PYSEC-2026-1794 UBUNTU-CVE-2023-4863 DLA-3570-1 DSA-5497-2
Also known as: A-299477569, ASB-A-299477569, CVE-2023-5129, DSA-5497-1, RUSTSEC-2023-0060, RUSTSEC-2023-0061, USN-6369-1, USN-6369-2

Charts affected

454 by stars

Chart

Latest

Affected images

Radar Score

workadventureworkadventure

1.1.0

2 of 9 See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	libwebp@1.2.2-r0	1.2.2-r2
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	libwebp@1.2.2-r0	1.2.2-r2

Open the chart page →

16,083

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	libwebp@0.6.1-2	0.6.1-2+deb10u3

Open the chart page →

1,138

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2

Open the chart page →

1,838

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	libwebp@0.6.1-2	0.6.1-2+deb10u3

Open the chart page →

1,138

Container images carrying it

416 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
anujdatar/cups :25.07.01	685df04a643b	pillow@9.4.0	10.0.1	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	pillow@9.1.0 libwebp@0.6.1-2.1	10.0.1 0.6.1-2.1+deb11u2	1
apsl/thumbor :6.7.0	51e2de5c2c70	pillow@5.4.1	10.0.1	1
archish27/python-fastapi-postgres :latest	6610071a2101	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
arfath29/3-tier-app-backend :latest	ee0750b18406	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
arfath29/3-tier-app-frontend :latest	384b3e377f47	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
arturisimo/server-urjc :v1.0	d8dc4430531e	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
asdkant/fastapi-hello-world :latest	a23d8bf7c885	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
asonix/pictrs :0.4.0-beta.19	480d36cd97e5	libwebp@1.2.3-r0	1.2.3-r2	1
assistiot/dlt_api :2.1.0	c8a170683be7	libwebp@0.6.1-2+deb10u2	0.6.1-2+deb10u3	1
assistiot/fl_orchestrator :ui-latest	20338b353aaf	libwebp@1.2.3-r0	1.2.3-r2	1
assistiot/resource-provisioning_prc :1.0.0	8b5d118bdf0e	libwebp@0.6.1-2.1+deb11u1	0.6.1-2.1+deb11u2	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	pillow@9.5.0	10.0.1	1
assistiot/tacticle_dashboard :web-latest	25fc9f373524	libwebp@1.2.3-r0	1.2.3-r2	1
avinash263/pyredis263 :latest	aa2b8727f1a6	libwebp@1.2.4-0.2	1.2.4-0.2+deb12u1	1
azhar008/flaskapplication :latest	a1e827b0adea	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	libwebp@0.6.1-2ubuntu0.20.04.1 pillow@8.1.0	0.6.1-2ubuntu0.20.04.3 10.0.1	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	libwebp@0.6.1-2ubuntu0.20.04.1	0.6.1-2ubuntu0.20.04.3	1
buntha/mlflow :2.1.1	154542cc3083	pillow@9.3.0 libwebp@0.6.1-2.1	10.0.1 0.6.1-2.1+deb11u2	1
camerahub/camerahub :0.36.23	a5af37dd6e1b	pillow@9.5.0 libwebp@0.6.1-2.1	10.0.1 0.6.1-2.1+deb11u2	1
camptocamp/bucket-cloner :latest	acfafc308d88	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
camptocamp/ekorre :0.1.0	35c91d5fda04	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
cdignam/kodiak :v0.54.0	5a6a55b39cee	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
chaosnative/cle-frontend :2.7.0	07b82a82a702	libwebp@1.2.2-r0	1.2.2-r2	1
coderaiser/cloudcmd :16.6.1	b34a9775c7ce	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
crazymax/rtorrent-rutorrent :3.10-0.9.8-0.13.8	fb307f5b87bf	libwebp@1.2.4-r1	1.2.4-r3	1
dacinfomotion/h2p :latest	68fa393b472c	libwebp@0.6.1-2+deb10u2	0.6.1-2+deb10u3	1
danuk/telegram-sender :0.0.1	026560388070	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
daskdev/dask :1.1.0	4ecd7bc35500	pillow@5.3.0	10.0.1	1
daskdev/dask-notebook :1.1.0	052630f5ca04	libwebp@0.6.1-2 pillow@5.4.1	0.6.1-2ubuntu0.18.04.2+esm1 10.0.1	1
deconzcommunity/deconz :2.29.2	062de2362641	pillow@9.4.0	10.0.1	1
deconzcommunity/deconz :2.12.06	6541bbb78952	pillow@5.4.1 libwebp@0.6.1-2+deb10u1	10.0.1 0.6.1-2+deb10u3	1
deluan/navidrome :0.49.3	11a24da08977	libwebp@1.2.4-r1	1.2.4-r3	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	libwebp@0.6.1-2ubuntu0.20.04.1	0.6.1-2ubuntu0.20.04.3	1
digitalist/nginx :1.21.6	eec27ad73eaa	libwebp@1.2.2-r0	1.2.2-r2	1
dnsforge/xteve :latest	4d9a685c8c28	libwebp@1.2.4-r1	1.2.4-r3	1
douz/helpdesk :latest	4384103d0219	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
douz/overlord :latest	f2bc7fc068c1	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
dpage/pgadmin4 :7.5	37946e4f3e7b	pillow@9.5.0	10.0.1	1
duck1123/astral :latest	f4d5b6526c2a	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
eclipseaerios/self-service-password :5.2.3	2f93bfa4cf0d	libwebp@1.2.2-r0	1.2.2-r2	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	libwebp@0.6.1-2ubuntu0.18.04.1	0.6.1-2ubuntu0.18.04.2+esm1	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	libwebp@0.6.1-2ubuntu0.18.04.1	0.6.1-2ubuntu0.18.04.2+esm1	1
elyra/kernel-image-puller :3.2.2	c922f1f1646a	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
emby/embyserver :4.9.1.80	22298eefb428	SkiaSharp@2.88.3	2.88.6	1
erlangsolutions/wombatoam :4.1.28	4680c990147a	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
esailors/aws-ecr-http-proxy :1.5.1	5608ae045fa7	libwebp@1.2.2-r0	1.2.2-r2	1