CVE-2023-5129GHSA-J7HP-H8JX-5PPRA-299477569ASB-A-299477569PYSEC-2026-1794RUSTSEC-2023-0060RUSTSEC-2023-0061
CVE-2023-5129
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- rejected
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 0.1.8, 0.9.3, 22.3.24, 24.8.3, 25.8.1, and 9 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
No description has been provided by the sources yet.
Timeline
- CVE published
- Record last updated
Affected versions
- libwebp-sys2crates.io
fixed in 0.1.8
- libwebp-syscrates.io
fixed in 0.9.3
- electronnpm
From 22.0.0 · fixed in 22.3.24
- electronnpm
From 24.0.0 · fixed in 24.8.3
- electronnpm
From 25.0.0 · fixed in 25.8.1
- electronnpm
From 26.0.0 · fixed in 26.2.1
- electronnpm
From 27.0.0-beta.1 · fixed in 27.0.0-beta.2
- SkiaSharpNuGet
From 2.0.0 · fixed in 2.88.6
- github.com/chai2010/webpGo
From 1.1.2 · fixed in 1.4.0
- pillowPyPI
fixed in 10.0.1
- webpcrates.io
fixed in 0.2.6
- magick.net-q16-anycpuNuGet
fixed in 13.3.0
- magick.net-q16-hdri-anycpuNuGet
fixed in 13.3.0
- magick.net-q16-x64NuGet
fixed in 13.3.0
- magick.net-q8-anycpuNuGet
fixed in 13.3.0
- magick.net-q8-openmp-x64NuGet
fixed in 13.3.0
- magick.net-q8-x64NuGet
fixed in 13.3.0
- github.com/chai2010/webpGo
fixed in 0.0.0-20250406010349-76805d5a8860
- github.com/chai2010/webpGo
From 0.0.0 · fixed in 1.1.2-0.20250406010349-76805d5a8860
- libwebp-sys2crates.io
From 0.0.0-0 · fixed in 0.1.8
- libwebp-syscrates.io
From 0.0.0-0 · fixed in 0.9.3