netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-56pw-mpj4-fxww

Browse Source
This commit is contained in:
advisory-database[bot]
2025-05-30 15:34:30 +00:00
parent eb4ba507b9
commit 6bb47852da
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/10/GHSA-56pw-mpj4-fxww/GHSA-56pw-mpj4-fxww.json
+4 -3
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-56pw-mpj4-fxww",
"modified": "2023-10-05T00:06:58Z",
"modified": "2025-05-30T15:32:54Z",
"published": "2023-10-05T00:06:58Z",
"withdrawn": "2025-05-30T15:32:54Z",
"aliases": [],
"summary": "Bundled libwebp in Pillow vulnerable",
"details": "Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.",
"summary": "Duplicate Advisory: Bundled libwebp in Pillow vulnerable",
"details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-56pw-mpj4-fxww. This link is maintained to preserve external references.\n\n## Original Description\nPillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.",
"severity": [],
"affected": [
{