{"id":"GHSA-cxjf-x6jp-p7mc","aliases":[],"url":"https://o3.security/vulnerability/GHSA-cxjf-x6jp-p7mc","summary":"opencv-contrib-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863","details":"opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.","published":"2024-08-30T23:37:19Z","modified":"2024-12-01T05:25:48.777698Z","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"opencv-contrib-python","fixedVersion":"4.8.1.78"}],"fix":{"url":"https://github.com/opencv/opencv/pull/24274","label":"opencv/opencv#24274"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4863"},{"type":"WEB","url":"https://github.com/opencv/opencv/pull/24274"},{"type":"WEB","url":"https://github.com/opencv/opencv/commit/687fc11626901cff09d2b3b5f331fd59190ad4c7"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr"},{"type":"PACKAGE","url":"https://github.com/opencv/opencv-python"},{"type":"WEB","url":"https://github.com/opencv/opencv/wiki/ChangeLog#version481"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/opencv-contrib-python/PYSEC-2023-181.yaml"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-12-01T05:25:48.777698Z"}}