{"action":"Upgrade opencv-contrib-python to 4.8.1.78 or later.","affected":[{"fixed":"4.8.1.78","introduced":"0"}],"component":"opencv-contrib-python","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["4.8.1.78"],"id":"tcs_01M5KGJQPWRD628CSDDQZJ2TMS","modified_at":"2026-02-04T04:14:03.833498Z","published_at":"2023-09-29T21:14:05Z","references":["https://osv.dev/vulnerability/PYSEC-2023-181","https://nvd.nist.gov/vuln/detail/CVE-2023-4863","https://github.com/opencv/opencv/wiki/ChangeLog#version481","https://github.com/opencv/opencv/pull/24274"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-181","url":"https://osv.dev/vulnerability/PYSEC-2023-181"}],"summary":"opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2."}