StackRadar

CVE-2023-4863

CriticalKEV

Advisory

Published 12 Sept 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.6
base score, highest
EPSS
1.000
100th percentile
CISA KEV
Listed
since 13 Sept 2023
Charts affected
454
of 17,781 indexed, latest versions
Container images
416
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: libwebp security update

Carried by container images the latest versions of 454 of 17,781 indexed charts deploy, on 416 images.

Affected packageAffected versionsFixed inImages
libwebprpm1.0.0-3.el8_40:1.0.0-7.el8_4.11
libwebpdeb0.6.1-2, 0.6.1-2.1, 0.6.1-2.1+deb11u1, 0.6.1-2+deb10u1+6 more0.6.1-2.1+deb11u2, 0.6.1-2+deb10u3, 0.6.1-2ubuntu0.18.04.2+esm1, 0.6.1-2ubuntu0.20.04.3+2 more300
libwebpapk1.2.2-r0, 1.2.3-r0, 1.2.3-r1, 1.2.4-r1+2 more1.2.2-r2, 1.2.3-r2, 1.2.4-r3, 1.3.1-r173
pillowpypi2.6.1, 4.3.0, 5.0.0, 5.1.0+21 more10.0.168
SkiaSharpnuget2.80.2, 2.88.1-preview.71, 2.88.2, 2.88.32.88.66
OSV records
RHSA-2023:5222ALPINE-CVE-2023-4863DEBIAN-CVE-2023-4863GHSA-j7hp-h8jx-5pprPYSEC-2026-1794UBUNTU-CVE-2023-4863DLA-3570-1DSA-5497-2
Also known as
A-299477569, ASB-A-299477569, CVE-2023-5129, DSA-5497-1, RUSTSEC-2023-0060, RUSTSEC-2023-0061, USN-6369-1, USN-6369-2

Charts affected

454 by stars
ChartLatestAffected imagesRadar Score
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
libwebp@1.2.2-r0
1.2.2-r2
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
libwebp@1.2.2-r0
1.2.2-r2

Open the chart page →

16,083
myfirstchartww-helm-charts-repo0.1.01 of 1See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:0.1.0205961b09a80
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

1,138
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

1,838
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

1,138

Container images carrying it

416 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/conductionnl/taalhuizen-service-nginx:latest0bbaa7487c63
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
ghcr.io/conductionnl/trouw-service-nginx:latest86fe293b99a2
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
ghcr.io/conductionnl/user-component-nginx:latestb721579df8c3
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/conductionnl/verhuis-service-nginx:latest4473ce50435e
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
ghcr.io/conductionnl/verzoekconversieservice-nginx:latestf449b82ce9d6
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx:lateste0c5f8a95098
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
ghcr.io/conductionnl/verzoektypecatalogus-nginx:latest42c75ea8082c
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
ghcr.io/conductionnl/waardepapieren-balie-nginx:latest2eb073ab8b83
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
ghcr.io/conductionnl/waardepapieren-nginx:latestaf31cf6cd59f
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/conductionnl/waardepapieren-register-nginx:latest3fba727a3cc1
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
libwebp@1.2.4-r1
1.2.4-r3
1
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
libwebp@0.6.1-2
0.6.1-2+deb10u3
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pillow@9.1.0
10.0.1
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/k10app/frontend:latest066b5ac6b119
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/k10app/staticcache:lateste77805689a8e
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
SkiaSharp@2.80.2
2.88.6
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
libwebp@1.2.2-2
1.2.2-2ubuntu0.22.04.2
1
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libwebp@0.6.1-2ubuntu0.18.04.1
0.6.1-2ubuntu0.18.04.2+esm1
1
ghcr.io/linuxserver/mylar3:version-v0.5.3b96f0e97ab3f
pillow@6.2.2
10.0.1
1
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
pillow@6.2.2
10.0.1
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/mjohnson9/docker-pleroma:v0.1.44f08e2823756
libwebp@1.2.3-r0
1.2.3-r2
1
ghcr.io/mroxso/pollstr:latest0b4f97faa3d0
libwebp@0.6.1-2.1+deb11u1
0.6.1-2.1+deb11u2
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
pillow@9.2.0
libwebp@0.6.1-2.1
10.0.1
0.6.1-2.1+deb11u2
1
ghcr.io/pascaliske/traefik-errors:1.1.00cf31753ce57
libwebp@1.2.4-r2
1.2.4-r3
1
ghcr.io/privacyengineering/hawk-monitor:master13309f068a56
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
libwebp@0.6.1-2.1+deb11u1
0.6.1-2.1+deb11u2
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
libwebp@0.6.1-2.1+deb11u1
0.6.1-2.1+deb11u2
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
libwebp@0.6.1-2.1+deb11u1
0.6.1-2.1+deb11u2
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.