Junglewise Threat Intelligence

PYSEC-2023-182 - opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to . opencv-con

Severity: info · Published 2023-09-29

Technologies: opencv-contrib-python-headless (PyPI). Vendors: PyPI.

Executive brief

opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.

Affected products

  • PyPI opencv-contrib-python-headless

Related threats