Golang.Org/X/Image/Webp vulnerabilities

2 vulnerabilities

Known vulnerabilities in Golang.Org/X/Image/Webp, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2026-46601chainguardbento+95
EPSS score
0.61%
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.7.5CVE-2026-33813chainguardbento+89
EPSS score
0.62%
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.