Junglewise Threat Intelligence

PYSEC-2023-184 - opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to . opencv-python-head

Severity: info · Published 2023-09-29

Technologies: opencv-python-headless (PyPI). Vendors: PyPI.

Executive brief

opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.

Affected products

  • PyPI opencv-python-headless

Related threats