https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:16:29.932320+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343462 EUVD-2026-343462 2026-10-06T11:16:29.985080+00:00 EUVD-2026-343462 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58586 fkie_cve-2026-58586 2026-10-06T11:16:29.985118+00:00

Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp.

Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 (released 2013-03-20). That version has multiple known vulnerabilities, including CVE-2023-4863.

Any caller that decodes an untrusted WebP image reaches the bundled decoder. Because the library is compiled into the module, upgrading the system libwebp does not remediate this.

 https://cve.radiocsirt.org/vuln/ghsa-7qv8-435q-f6x2 GHSA-7qv8-435q-f6x2 2026-10-06T11:16:29.985154+00:00

Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp.

Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 (released 2013-03-20). That version has multiple known vulnerabilities, including CVE-2023-4863.

Any caller that decodes an untrusted WebP image reaches the bundled decoder. Because the library is compiled into the module, upgrading the system libwebp does not remediate this.