Known vulnerabilities in golang.org/x/image/webp
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-46601 | The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size | 7.5 High | Jun 25, 2026 |
| CVE-2026-33813 | Parsing a WEBP image with an invalid, large size panics on 32-bit platforms | 7.5 High | Apr 21, 2026 |