https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:52:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343462 EUVD-2026-343462 https://cve.radiocsirt.org/vuln/euvd-2026-343462 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58586 <p>Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp.</p> <p>Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 (released 2013-03-20). That version has multiple known vulnerabilities, including CVE-2023-4863.</p> <p>Any caller that decodes an untrusted WebP image reaches the bundled decoder. Because the library is compiled into the module, upgrading the system libwebp does not remediate this.</p> <p>Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp.</p> <p>Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 (released 2013-03-20). That version has multiple known vulnerabilities, including CVE-2023-4863.</p> <p>Any caller that decodes an untrusted WebP image reaches the bundled decoder. Because the library is compiled into the module, upgrading the system libwebp does not remediate this.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-58586 https://cve.radiocsirt.org/vuln/ghsa-7qv8-435q-f6x2 <p>Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp.</p> <p>Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 (released 2013-03-20). That version has multiple known vulnerabilities, including CVE-2023-4863.</p> <p>Any caller that decodes an untrusted WebP image reaches the bundled decoder. Because the library is compiled into the module, upgrading the system libwebp does not remediate this.</p> <p>Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp.</p> <p>Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 (released 2013-03-20). That version has multiple known vulnerabilities, including CVE-2023-4863.</p> <p>Any caller that decodes an untrusted WebP image reaches the bundled decoder. Because the library is compiled into the module, upgrading the system libwebp does not remediate this.</p> https://cve.radiocsirt.org/vuln/ghsa-7qv8-435q-f6x2