{"action":"Upgrade imagecodecs to 2023.9.18 or later.","affected":[{"fixed":"2023.9.18","introduced":"0"}],"component":"imagecodecs","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["2023.9.18"],"ghsa_id":"GHSA-94vc-p8w7-5p49","id":"tcs_01M5KF9TH33E2Q8KMY7TTWPQRS","modified_at":"2024-11-28T05:41:59.007222Z","published_at":"2023-10-05T00:07:46Z","references":["https://osv.dev/vulnerability/GHSA-94vc-p8w7-5p49","https://nvd.nist.gov/vuln/detail/CVE-2023-4863","https://nvd.nist.gov/vuln/detail/CVE-2023-5129","https://github.com/cgohlke/imagecodecs","https://github.com/cgohlke/imagecodecs/blob/v2023.9.18/CHANGES.rst","https://github.com/pypa/advisory-database/tree/main/vulns/imagecodecs/PYSEC-2023-174.yaml"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-94vc-p8w7-5p49","url":"https://osv.dev/vulnerability/GHSA-94vc-p8w7-5p49"}],"summary":"Bundled libwebp in imagecodecs vulnerable"}