libwebp-sys vulnerabilities (crates.io)

2 vulnerabilities.

• libwebp-sys crates.io With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. ... CVE-2023-5129 Fix availableRejected 10.0 CriticalSeptember 12, 2023
• libwebp-sys crates.io Duplicate Advisory: Bundled libwebp in Pillow vulnerable CVE-2023-4863 In KEVPublic exploitFix available EPSS 100.0% 8.8 HighSeptember 12, 2023