Skip to content

magick.net-q8-anycpu vulnerabilities (NuGet)

2 vulnerabilities.

magick.net-q8-anycpu NuGetWith a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. ...CVE-2023-5129Fix availableRejected10.0 CriticalSeptember 12, 2023
magick.net-q8-anycpu NuGetDuplicate Advisory: Bundled libwebp in Pillow vulnerableCVE-2023-4863In KEVPublic exploitFix availableEPSS 100.0%8.8 HighSeptember 12, 2023