CVE-2023-4863
CriticalKEVAdvisory
Published 12 Sept 2023In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.6
- base score, highest
- EPSS
- 1.000
- 100th percentile
- CISA KEV
- Listed
- since 13 Sept 2023
- Charts affected
- 454
- of 17,781 indexed, latest versions
- Container images
- 416
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: libwebp security update
Carried by container images the latest versions of 454 of 17,781 indexed charts deploy, on 416 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libwebprpm | 1.0.0-3.el8_4 | 0:1.0.0-7.el8_4.1 | 1 |
| libwebpdeb | 0.6.1-2, 0.6.1-2.1, 0.6.1-2.1+deb11u1, 0.6.1-2+deb10u1+6 more | 0.6.1-2.1+deb11u2, 0.6.1-2+deb10u3, 0.6.1-2ubuntu0.18.04.2+esm1, 0.6.1-2ubuntu0.20.04.3+2 more | 300 |
| libwebpapk | 1.2.2-r0, 1.2.3-r0, 1.2.3-r1, 1.2.4-r1+2 more | 1.2.2-r2, 1.2.3-r2, 1.2.4-r3, 1.3.1-r1 | 73 |
| pillowpypi | 2.6.1, 4.3.0, 5.0.0, 5.1.0+21 more | 10.0.1 | 68 |
| SkiaSharpnuget | 2.80.2, 2.88.1-preview.71, 2.88.2, 2.88.3 | 2.88.6 | 6 |
- OSV records
- RHSA-2023:5222ALPINE-CVE-2023-4863DEBIAN-CVE-2023-4863GHSA-j7hp-h8jx-5pprPYSEC-2026-1794UBUNTU-CVE-2023-4863DLA-3570-1DSA-5497-2
- Also known as
- A-299477569, ASB-A-299477569, CVE-2023-5129, DSA-5497-1, RUSTSEC-2023-0060, RUSTSEC-2023-0061, USN-6369-1, USN-6369-2
Charts affected
454 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| workadventureworkadventure | 1.1.0 | 2 of 9See more | 16,083 |
| myfirstchartww-helm-charts-repo | 0.1.0 | 1 of 1See more | 1,138 |
| enterprise-gatewayzeet | 3.2.2 | 1 of 2See more | 1,838 |
| myfirstchartzikilabVerified publisher | 0.2.0 | 1 of 1See more | 1,138 |
Container images carrying it
416 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 8e1095642250 | libwebp | 0.6.1-2+deb10u3 | 1 |
| library/ | ab589a3c466e | libwebp | 0.6.1-2.1+deb11u2 | 1 |
| library/ | b2d89d0a2103 | libwebp | 0.6.1-2+deb10u3 | 1 |
| library/ | d20aa6d1cae5 | libwebp | 0.6.1-2+deb10u3 | 1 |
| library/ | f4e3b6489888 | libwebp | 0.6.1-2.1+deb11u2 | 1 |
| library/ | f5747a42e3ad | libwebp | 0.6.1-2.1+deb11u2 | 1 |
| library/ | f77a1aef2da8 | libwebp | 0.6.1-2+deb10u3 | 1 |
| library/ | 277c6c25980f | libwebp | 0.6.1-2.1+deb11u2 | 1 |
| librenms/ | 4f1f3d667cc7 | libwebp | 1.2.2-r2 | 1 |
| linuxserver/ | f7d7c7704249 | pillow | 10.0.1 | 1 |
| linuxserver/ | e36d16f7341c | pillow | 10.0.1 | 1 |
| linuxserver/ | a847b5b2d860 | libwebp | 0.6.1-2ubuntu0.18.04.2+esm1 | 1 |
| linuxserver/ | 938810eca3d3 | libwebp | 0.6.1-2ubuntu0.20.04.3 | 1 |
| linuxserver/ | 89cd8d5fb1ac | pillow | 10.0.1 | 1 |
| linuxserver/ | c4d2766b9eb7 | pillow | 10.0.1 | 1 |
| linuxserver/ | 0ac871624394 | libwebp pillow | 0.6.1-2ubuntu0.18.04.2+esm1 10.0.1 | 1 |
| linuxserver/ | 2ce561a95e7b | libwebp pillow | 0.6.1-2ubuntu0.18.04.2+esm1 10.0.1 | 1 |
| linuxserver/ | f8f5f96b6ea8 | libwebp | 1.3.1-r1 | 1 |
| linuxserver/ | 2427dde159a2 | libwebp SkiaSharp | 0.6.1-2ubuntu0.20.04.3 2.88.6 | 1 |
| linuxserver/ | f93d2560e233 | pillow | 10.0.1 | 1 |
| linuxserver/ | e48b479c1891 | pillow | 10.0.1 | 1 |
| livekit/ | 1ab01641b366 | libwebp | 1.2.2-2ubuntu0.22.04.2 | 1 |
| lnbitsdocker/ | a11aaa6d2b21 | libwebp | 0.6.1-2.1+deb11u2 | 1 |
| lsstdm/ | 973df082d006 | libwebp | 0.6.1-2+deb10u3 | 1 |
| lsstdm/ | 74c97a490940 | libwebp | 0.6.1-2+deb10u3 | 1 |
| lsstsqre/ | 79b00fb67a65 | pillow | 10.0.1 | 1 |
| lsstsqre/ | be1b21060854 | libwebp | 0.6.1-2+deb10u3 | 1 |
| lsstsqre/ | 4879415ec6ac | libwebp | 0.6.1-2+deb10u3 | 1 |
| maissacrement/ | 6da0db1159da | libwebp | 0.6.1-2.1+deb11u2 | 1 |
| matrixdotorg/ | cb89c0f17ba1 | pillow libwebp | 10.0.1 0.6.1-2.1+deb11u2 | 1 |
| matrixdotorg/ | def97fd537d8 | pillow libwebp | 10.0.1 0.6.1-2.1+deb11u2 | 1 |
| mcronce/ | f820ef2e3c26 | pillow | 10.0.1 | 1 |
| mcronce/ | c03c1c7f5aa9 | pillow | 10.0.1 | 1 |
| mediagis/ | c15e941485ef | libwebp | 0.6.1-2ubuntu0.20.04.3 | 1 |
| mide/ | 4eee0dcb715f | pillow | 10.0.1 | 1 |
| mintproject/ | 9bf26fedd848 | libwebp | 1.2.3-r2 | 1 |
| mintproject/ | 08c1a13c3397 | libwebp | 1.2.3-r2 | 1 |
| mintproject/ | deb80c93b4a9 | libwebp | 1.2.3-r2 | 1 |
| misskey/ | e08b7c478093 | libwebp | 1.2.2-r2 | 1 |
| mnaggar3396/ | 371d8ed84b15 | libwebp | 0.6.1-2.1+deb11u2 | 1 |
| mondata/ | 6f94c6caf8bf | pillow | 10.0.1 | 1 |
| moreillon/ | 3739ef6956b5 | libwebp | 0.6.1-2+deb10u3 | 1 |
| moreillon/ | ce60056b50c2 | libwebp | 0.6.1-2+deb10u3 | 1 |
| moreillon/ | bacb2ddd8394 | pillow libwebp | 10.0.1 0.6.1-2.1+deb11u2 | 1 |
| moreillon/ | 0a8a7daf56f6 | libwebp | 0.6.1-2+deb10u3 | 1 |
| moreillon/ | fc4d12db1d3e | libwebp | 0.6.1-2.1+deb11u2 | 1 |
| mozilla/ | 1da6ff5c4895 | libwebp | 0.6.1-2+deb10u3 | 1 |
| mvitale1989/ | 1504ccda06df | pillow | 10.0.1 | 1 |
| n8nio/ | a9195bc499a3 | libwebp | 1.2.3-r2 | 1 |
| nathanielvarona/ | b746a34e5597 | libwebp | 0.6.1-2.1+deb11u2 | 1 |