PYSEC-2023-182
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.
What each source reports
OSV No score
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.
- Record
PYSEC-2023-182- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opencv-contrib-python-headlessPyPI |
before 4.8.1.78, plus listed versions 3.4.0.143.4.1.153.4.10.353.4.10.373.4.11.39 Show 45 moreShow less3.4.11.413.4.11.433.4.11.453.4.13.473.4.14.513.4.14.533.4.15.553.4.16.573.4.16.593.4.17.613.4.17.633.4.18.653.4.2.163.4.2.173.4.3.183.4.4.193.4.5.203.4.6.273.4.7.283.4.8.293.4.9.313.4.9.334.0.0.214.0.1.234.0.1.244.1.0.254.1.1.264.1.2.304.2.0.324.2.0.344.3.0.364.3.0.384.4.0.404.4.0.424.4.0.444.4.0.464.5.1.484.5.2.524.5.2.544.5.3.564.5.4.584.5.4.604.5.5.624.5.5.644.6.0.66 |
4.8.1.78 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
PYSEC-2023-182 is a vulnerability with no CVSS score yet in opencv-contrib-python-headless, published September 29, 2023. No source lists public exploit code. Fixed in opencv-contrib-python-headless 4.8.1.78.
References
Left out here: 4 versions. The JSON record has them.