CVE-2023-4863

CriticalKEV

Advisory

Published 12 Sept 2023In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.6; base score, highest
EPSS: 1.000; 100th percentile
CISA KEV: Listed; since 13 Sept 2023
Charts affected: 454; of 17,781 indexed, latest versions
Container images: 416; deployed by those charts
Fix available: 5 of 5; affected packages

Red Hat Security Advisory: libwebp security update

Carried by container images the latest versions of 454 of 17,781 indexed charts deploy, on 416 images.

Affected package	Affected versions	Fixed in	Images
libwebprpm	1.0.0-3.el8_4	0:1.0.0-7.el8_4.1	1
libwebpdeb	0.6.1-2, 0.6.1-2.1, 0.6.1-2.1+deb11u1, 0.6.1-2+deb10u1+6 more	0.6.1-2.1+deb11u2, 0.6.1-2+deb10u3, 0.6.1-2ubuntu0.18.04.2+esm1, 0.6.1-2ubuntu0.20.04.3+2 more	300
libwebpapk	1.2.2-r0, 1.2.3-r0, 1.2.3-r1, 1.2.4-r1+2 more	1.2.2-r2, 1.2.3-r2, 1.2.4-r3, 1.3.1-r1	73
pillowpypi	2.6.1, 4.3.0, 5.0.0, 5.1.0+21 more	10.0.1	68
SkiaSharpnuget	2.80.2, 2.88.1-preview.71, 2.88.2, 2.88.3	2.88.6	6

OSV records: RHSA-2023:5222 ALPINE-CVE-2023-4863 DEBIAN-CVE-2023-4863 GHSA-j7hp-h8jx-5ppr PYSEC-2026-1794 UBUNTU-CVE-2023-4863 DLA-3570-1 DSA-5497-2
Also known as: A-299477569, ASB-A-299477569, CVE-2023-5129, DSA-5497-1, RUSTSEC-2023-0060, RUSTSEC-2023-0061, USN-6369-1, USN-6369-2

Charts affected

454 by stars

Chart

Latest

Affected images

Radar Score

workadventureworkadventure

1.1.0

2 of 9 See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	libwebp@1.2.2-r0	1.2.2-r2
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	libwebp@1.2.2-r0	1.2.2-r2

Open the chart page →

16,083

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	libwebp@0.6.1-2	0.6.1-2+deb10u3

Open the chart page →

1,138

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2

Open the chart page →

1,838

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	libwebp@0.6.1-2	0.6.1-2+deb10u3

Open the chart page →

1,138

Container images carrying it

416 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ncsapolyglot/converters-ebook-convert :latest	438d82cdbdb5	pillow@5.2.0	10.0.1	1
netboxcommunity/netbox :v3.2.8	3d652dca5351	pillow@9.2.0	10.0.1	1
nethermind/nethermind :1.14.6	15517708c3b6	libwebp@1.2.2-2	1.2.2-2ubuntu0.22.04.2	1
nginx/nginx-ingress :1.11.1	eb5b4fd73325	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
nlmacamp/check_mk :latest	5dbb8589f824	pillow@5.0.0	10.0.1	1
nrrrus/nginx-test :latest	5f55cd4ef557	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
octoprint/octoprint :1.4.0	106c26efcd8a	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
octoprint/octoprint :1.6.1	ea3bffae2470	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	libwebp@0.6.1-2	0.6.1-2ubuntu0.18.04.2+esm1	1
opendatacube/wms :latest	1b90cdf68831	libwebp@0.6.1-2 pillow@5.1.0	0.6.1-2ubuntu0.18.04.2+esm1 10.0.1	1
opendatacube/wps :latest	80df355a660b	pillow@9.0.1	10.0.1	1
openelevation/open-elevation :latest	82fb21612e86	libwebp@0.6.1-2ubuntu0.20.04.1	0.6.1-2ubuntu0.20.04.3	1
openemr/openemr :6.1.0	89eaa6d9a4e3	libwebp@1.2.2-r0	1.2.2-r2	1
openkm/openkm-ce :6.3.11	3bc465a7461b	libwebp@0.6.1-2ubuntu0.20.04.1	0.6.1-2ubuntu0.20.04.3	1
openproject/community :12.0.2	734743d11094	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
openspeedtest/latest :v2.0.0	d4d62f4b7d85	libwebp@1.2.4-r2	1.2.4-r3	1
openwhisk/kafkaprovider :2.1.0	63dc3d2a0904	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
openzaak/open-zaak :1.6.0	2ca2ea6e0ae9	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
patdada/bella-docker :v1.0.0	75127147a624	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
pecan/monitor :1.7.2	73b2074f3fec	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
penpotapp/frontend :2.2.1	8974882a0542	libwebp@0.6.1-2.1+deb11u1	0.6.1-2.1+deb11u2	1
phntom/binaryvision-static-wordpress :0.0.3	85a2dfb83b11	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
phntom/email-manager :0.1.22	d8e2a9f2f085	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
phntom/kix-static-website :latest	49ce665acb59	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
phntom/mattermost-defaultbackend :6.4.0	c318dc90a4bf	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
photoprism/photoprism :220629-jammy	2954334adbda	libwebp@1.2.2-2	1.2.2-2ubuntu0.22.04.2	1
phpmyadmin/phpmyadmin :5.1	38437e021deb	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
plumdog/db-operator :latest	0c2fa2db0357	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
pnnlmiscscripts/k8s-node-image :1.20.15-nginx-18	bbc7a777f9f7	libwebp@1.2.2-r0	1.2.3-r2	1
pnnlmiscscripts/k8s-node-image9 :1.23.17-nginx-34	79ada675515f	libwebp@1.2.4-r2	1.2.4-r3	1
pnnlmiscscripts/k8s-node-image9 :1.22.17-nginx-34	b85e437ae261	libwebp@1.2.4-r2	1.2.4-r3	1
pnnlmiscscripts/k8s-node-image9 :1.21.14-nginx-33	fa8f5906d36a	libwebp@1.2.4-r2	1.2.4-r3	1
postgis/postgis :15-3.3-alpine	4738bee21eb6	libwebp@1.3.1-r0	1.3.1-r1	1
postgis/postgis :10-3.2-alpine	7e3e68a36d53	libwebp@1.2.3-r0	1.2.3-r2	1
prefapp/nginx-proxified :latest	f4d026fd9a26	libwebp@1.2.3-r0	1.2.3-r2	1
project2team4/react :latest	3ff031a08887	libwebp@0.6.1-2ubuntu0.20.04.1	0.6.1-2ubuntu0.20.04.3	1
rdavidoff/twitch-channel-points-miner-v2 :1.8.6	7ae4c5135771	pillow@10.0.0	10.0.1	1
reportportal/service-ui :5.7.2	0a08784eb901	libwebp@1.2.2-r0	1.2.3-r2	1
rlex/jsonvisio :1.9.5	cd50ff65118e	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
roadiehq/community-backstage-image :latest	ef355bf5b639	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
robmarkcole/deepstack-ui :latest	410275726459	pillow@8.3.2 libwebp@0.6.1-2.1	10.0.1 0.6.1-2.1+deb11u2	1
robotshop/rs-payment :latest	774b52c6180d	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
robotshop/rs-web :latest	b3c20d4a22f2	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
roundcube/roundcubemail :1.5.3-apache	a8ea6fd751dc	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
samajh/alprbackend :latest	ea742b4372ad	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
samajh/alprfrontend :latest	05ef4fddbb75	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
santisbon/evwatcher :latest	c4e994ca4540	libwebp@1.2.4-0.2	1.2.4-0.2+deb12u1	1
santisbon/evworker :latest	e807283f8d69	libwebp@1.2.4-0.2	1.2.4-0.2+deb12u1	1