StackRadar

CVE-2023-4863

CriticalKEV

Advisory

Published 12 Sept 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.6
base score, highest
EPSS
1.000
100th percentile
CISA KEV
Listed
since 13 Sept 2023
Charts affected
454
of 17,781 indexed, latest versions
Container images
416
deployed by those charts
Fix available
5 of 5
affected packages

Red Hat Security Advisory: libwebp security update

Carried by container images the latest versions of 454 of 17,781 indexed charts deploy, on 416 images.

Affected packageAffected versionsFixed inImages
libwebprpm1.0.0-3.el8_40:1.0.0-7.el8_4.11
libwebpdeb0.6.1-2, 0.6.1-2.1, 0.6.1-2.1+deb11u1, 0.6.1-2+deb10u1+6 more0.6.1-2.1+deb11u2, 0.6.1-2+deb10u3, 0.6.1-2ubuntu0.18.04.2+esm1, 0.6.1-2ubuntu0.20.04.3+2 more300
libwebpapk1.2.2-r0, 1.2.3-r0, 1.2.3-r1, 1.2.4-r1+2 more1.2.2-r2, 1.2.3-r2, 1.2.4-r3, 1.3.1-r173
pillowpypi2.6.1, 4.3.0, 5.0.0, 5.1.0+21 more10.0.168
SkiaSharpnuget2.80.2, 2.88.1-preview.71, 2.88.2, 2.88.32.88.66
OSV records
RHSA-2023:5222ALPINE-CVE-2023-4863DEBIAN-CVE-2023-4863GHSA-j7hp-h8jx-5pprPYSEC-2026-1794UBUNTU-CVE-2023-4863DLA-3570-1DSA-5497-2
Also known as
A-299477569, ASB-A-299477569, CVE-2023-5129, DSA-5497-1, RUSTSEC-2023-0060, RUSTSEC-2023-0061, USN-6369-1, USN-6369-2

Charts affected

454 by stars
ChartLatestAffected imagesRadar Score
equizequiz0.0.11 of 3See more

equiz equiz 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

7,541
equizequiz-chart0.0.11 of 3See more

equiz equiz-chart 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

7,541
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

4,678
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
libwebp@1.2.2-2
1.2.2-2ubuntu0.22.04.2

Open the chart page →

4,920
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3

Open the chart page →

20,933
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
simpleidserver/faaswebsite:0.0.4367218ae760f
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

7,617
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
pillow@9.3.0
libwebp@0.6.1-2.1
10.0.1
0.6.1-2.1+deb11u2

Open the chart page →

4,085
mandefactlyVerified publisher0.5.161 of 3See more

mande factly 0.5.16

1 of the 3 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
factly/mande-studio:0.34.19db4bee30e63
libwebp@1.2.4-r2
1.2.4-r3

Open the chart page →

4,777
yelbfairwinds-incubator0.1.12 of 5See more

yelb fairwinds-incubator 0.1.1

2 of the 5 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
quay.io/fairwinds/yelb-ui:v0.1.05ac114e567ed
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

5,089
smeejasfanzynoodle0.0.11 of 1See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
fanzynoodle/smeejas:0.0.15f9916c1a287
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

4,127
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
stratospire/activityrelay:0.2.3a4c34cb01117
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

13,450
myfirstchartfeisty-chart-repo0.4.01 of 1See more

myfirstchart feisty-chart-repo 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:0.4.0279eb855e6c7
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

1,138
kodiakfikaworks1.1.41 of 2See more

kodiak fikaworks 1.1.4

1 of the 2 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
cdignam/kodiak:v0.54.05a6a55b39cee
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

3,892
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
openmf/community-app:latest496b60a51f28
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

7,792
simple-websitefour-allportalVerified publisher1.0.21 of 1See more

simple-website four-allportal 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
library/nginx:1.23.3f4e3b6489888
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

831
aptlyg0dscookie0.4.02 of 2See more

aptly g0dscookie 0.4.0

2 of the 2 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
library/nginx:1.212bcabc23b454
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

3,481
passboltg0dscookie0.5.21 of 2See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

7,940
guacamolegabibbo970.3.01 of 3See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
guacamole/guacd:1.3.049d43948140f
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

6,412
ldap-account-managergabibbo970.2.11 of 1See more

ldap-account-manager gabibbo97 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:7.295533a96a4c1
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

2,404
myfirstchartganesshi-helm-charts-repo0.2.01 of 1See more

myfirstchart ganesshi-helm-charts-repo 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

1,138
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3

Open the chart page →

18,230
anonaddygeek-cookbookVerified publisher6.0.01 of 1See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
anonaddy/anonaddy:0.12.3957a95565166
libwebp@1.2.3-r0
1.2.3-r2

Open the chart page →

4,788
babybuddygeek-cookbookVerified publisher1.2.21 of 1See more

babybuddy geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
linuxserver/babybuddy:1.10.2f7d7c7704249
pillow@9.0.1
10.0.1

Open the chart page →

1,489
beetsgeek-cookbookVerified publisher1.4.21 of 1See more

beets geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
linuxserver/beets:1.5.0e36d16f7341c
pillow@8.4.0
10.0.1

Open the chart page →

1,150
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libwebp@0.6.1-2ubuntu0.18.04.1
0.6.1-2ubuntu0.18.04.2+esm1

Open the chart page →

19,215
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
libwebp@0.6.1-2ubuntu0.18.04.1
pillow@5.1.0
0.6.1-2ubuntu0.18.04.2+esm1
10.0.1

Open the chart page →

13,551
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
SkiaSharp@2.80.2
2.88.6

Open the chart page →

8,545
jellyfingeek-cookbookVerified publisher9.5.31 of 1See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1ee24f4459a40
SkiaSharp@2.88.1-preview.71
libwebp@0.6.1-2.1
2.88.6
0.6.1-2.1+deb11u2

Open the chart page →

1,381
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3

Open the chart page →

14,283
mylargeek-cookbookVerified publisher4.4.21 of 1See more

mylar geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/mylar3:version-v0.5.3b96f0e97ab3f
pillow@6.2.2
10.0.1

Open the chart page →

1,423
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
libwebp@1.2.2-r0
1.2.2-r2

Open the chart page →

8,392
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libwebp@1.2.2-2
1.2.2-2ubuntu0.22.04.2

Open the chart page →

19,503
privatebingeek-cookbookVerified publisher2.2.01 of 1See more

privatebin geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
privatebin/pdo:1.3.500466418121c
libwebp@1.2.2-r0
1.2.2-r2

Open the chart page →

1,159
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3

Open the chart page →

15,730
pyloadgeek-cookbookVerified publisher6.4.21 of 1See more

pyload geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
pillow@6.2.2
10.0.1

Open the chart page →

1,236
rtorrent-rutorrentgeek-cookbookVerified publisher1.1.21 of 1See more

rtorrent-rutorrent geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
libwebp@1.2.4-r1
1.2.4-r3

Open the chart page →

4,232
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
libwebp@0.6.1-2ubuntu0.20.04.1
pillow@8.3.1
0.6.1-2ubuntu0.20.04.3
10.0.1

Open the chart page →

24,293
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3

Open the chart page →

4,591
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
libwebp@0.6.1-2ubuntu0.18.04.1
0.6.1-2ubuntu0.18.04.2+esm1

Open the chart page →

26,944
theme-parkgeek-cookbookVerified publisher1.2.21 of 1See more

theme-park geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2

Open the chart page →

1,286
torrservergeek-cookbookVerified publisher1.2.21 of 1See more

torrserver geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
smailkoz/torrserver:1.0.1117b52d15de8f0
libwebp@1.2.2-r0
1.2.2-r2

Open the chart page →

3,165
vikunjageek-cookbookVerified publisher6.2.01 of 4See more

vikunja geek-cookbook 6.2.0

1 of the 4 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
vikunja/frontend:0.17.0863a426a8e49
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

6,893
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3

Open the chart page →

17,929
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-nginx:latestd0daf48dec68
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3

Open the chart page →

7,510
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
gresearchdev/siembol-config-editor-ui:latest071e7109a981
libwebp@1.2.3-r0
1.2.3-r2

Open the chart page →

14,312
h2ph2pVerified publisher1.0.11 of 1See more

h2p h2p 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
dacinfomotion/h2p:latest68fa393b472c
libwebp@0.6.1-2+deb10u2
0.6.1-2+deb10u3

Open the chart page →

1,713
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
daniacobext/airports-frontend:latest9eae4d39fc33
libwebp@1.2.4-r2
1.2.4-r3

Open the chart page →

12,696
backstagehelm-charts-nr0.1.152 of 2See more

backstage helm-charts-nr 0.1.15

2 of the 2 container images this version deploys carry CVE-2023-4863.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
libwebp@0.6.1-2
0.6.1-2+deb10u3
martinaif/backstage-k8s-demo-frontend:test1f07fbe15e5b5
libwebp@0.6.1-2
0.6.1-2+deb10u3

Open the chart page →

8,213

Container images carrying it

416 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
libwebp@0.6.1-2+deb10u2
0.6.1-2+deb10u3
1
ghcr.io/volosoft/eshoponabp/app-web:1.0.0056bb4271626
libwebp@1.2.3-r0
1.2.3-r2
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
libwebp@1.2.2-r0
1.2.2-r2
1
ghcr.io/wbstack/ui:3.94b01f67faadf1
libwebp@1.2.2-r0
1.2.2-r2
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
pillow@9.4.0
10.0.1
1
public.ecr.aws/jtekt-corporation/annotation-tool:ef974ad9abd817eb6845
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool:a3fa936056efd38500d6
libwebp@0.6.1-2.1
0.6.1-2.1+deb11u2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libwebp@0.6.1-2ubuntu0.20.04.1
0.6.1-2ubuntu0.20.04.3
1
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
quay.io/fairwinds/yelb-ui:v0.1.05ac114e567ed
libwebp@0.6.1-2
0.6.1-2+deb10u3
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
libwebp@0.6.1-2+deb10u1
0.6.1-2+deb10u3
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libwebp@1.2.4-0.2
1.2.4-0.2+deb12u1
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
libwebp@0.6.1-2
0.6.1-2+deb10u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.