CVE-2023-4863

CriticalKEV

Advisory

Published 12 Sept 2023In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.6; base score, highest
EPSS: 1.000; 100th percentile
CISA KEV: Listed; since 13 Sept 2023
Charts affected: 454; of 17,781 indexed, latest versions
Container images: 416; deployed by those charts
Fix available: 5 of 5; affected packages

Red Hat Security Advisory: libwebp security update

Carried by container images the latest versions of 454 of 17,781 indexed charts deploy, on 416 images.

Affected package	Affected versions	Fixed in	Images
libwebprpm	1.0.0-3.el8_4	0:1.0.0-7.el8_4.1	1
libwebpdeb	0.6.1-2, 0.6.1-2.1, 0.6.1-2.1+deb11u1, 0.6.1-2+deb10u1+6 more	0.6.1-2.1+deb11u2, 0.6.1-2+deb10u3, 0.6.1-2ubuntu0.18.04.2+esm1, 0.6.1-2ubuntu0.20.04.3+2 more	300
libwebpapk	1.2.2-r0, 1.2.3-r0, 1.2.3-r1, 1.2.4-r1+2 more	1.2.2-r2, 1.2.3-r2, 1.2.4-r3, 1.3.1-r1	73
pillowpypi	2.6.1, 4.3.0, 5.0.0, 5.1.0+21 more	10.0.1	68
SkiaSharpnuget	2.80.2, 2.88.1-preview.71, 2.88.2, 2.88.3	2.88.6	6

OSV records: RHSA-2023:5222 ALPINE-CVE-2023-4863 DEBIAN-CVE-2023-4863 GHSA-j7hp-h8jx-5ppr PYSEC-2026-1794 UBUNTU-CVE-2023-4863 DLA-3570-1 DSA-5497-2
Also known as: A-299477569, ASB-A-299477569, CVE-2023-5129, DSA-5497-1, RUSTSEC-2023-0060, RUSTSEC-2023-0061, USN-6369-1, USN-6369-2

Charts affected

454 by stars

Chart

Latest

Affected images

Radar Score

workadventureworkadventure

1.1.0

2 of 9 See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	libwebp@1.2.2-r0	1.2.2-r2
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	libwebp@1.2.2-r0	1.2.2-r2

Open the chart page →

16,083

myfirstchartww-helm-charts-repo

0.1.0

1 of 1 See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginx :0.1.0	205961b09a80	libwebp@0.6.1-2	0.6.1-2+deb10u3

Open the chart page →

1,138

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2

Open the chart page →

1,838

myfirstchartzikilab

0.2.0

1 of 1 See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kubenginxhelm :0.2.0	ae2268dcc930	libwebp@0.6.1-2	0.6.1-2+deb10u3

Open the chart page →

1,138

Container images carrying it

416 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	libwebp@0.6.1-2ubuntu0.20.04.1	0.6.1-2ubuntu0.20.04.3	1
ghcr.io/vincenttaglia/indexer-tools :v3.4.4	5bae30456ddb	libwebp@0.6.1-2+deb10u2	0.6.1-2+deb10u3	1
ghcr.io/volosoft/eshoponabp/app-web :1.0.0	056bb4271626	libwebp@1.2.3-r0	1.2.3-r2	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	libwebp@1.2.2-r0	1.2.2-r2	1
ghcr.io/wbstack/ui :3.94	b01f67faadf1	libwebp@1.2.2-r0	1.2.2-r2	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	pillow@9.4.0	10.0.1	1
public.ecr.aws/jtekt-corporation/annotation-tool :ef974ad9	abd817eb6845	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool :a3fa9360	56efd38500d6	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	libwebp@0.6.1-2ubuntu0.20.04.1	0.6.1-2ubuntu0.20.04.3	1
quay.io/fairwinds/yelb-appserver :v0.6.0	fae21f06131f	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
quay.io/fairwinds/yelb-ui :v0.1.0	5ac114e567ed	libwebp@0.6.1-2	0.6.1-2+deb10u3	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	libwebp@0.6.1-2+deb10u1	0.6.1-2+deb10u3	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libwebp@1.2.4-0.2	1.2.4-0.2+deb12u1	1
registry.gitlab.com/open-forms/design-catalogue :latest	f21f19346b29	libwebp@0.6.1-2	0.6.1-2+deb10u3	1