{"action":"Upgrade imagecodecs to 2023.9.18 or later.","affected":[{"fixed":"2023.9.18","introduced":"0"}],"component":"imagecodecs","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["2023.9.18"],"id":"tcs_01M5KGJPJ2V5APDXBW37EA0QGJ","modified_at":"2026-02-04T04:25:39.241939Z","published_at":"2023-09-20T05:11:16Z","references":["https://osv.dev/vulnerability/PYSEC-2023-174","https://github.com/cgohlke/imagecodecs/blob/v2023.9.18/CHANGES.rst","https://nvd.nist.gov/vuln/detail/CVE-2023-5129","https://nvd.nist.gov/vuln/detail/CVE-2023-4863"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-174","url":"https://osv.dev/vulnerability/PYSEC-2023-174"}],"summary":"imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). imagecodecs v2023.9.18 upgrades the bundled libwebp binary to"}