Threats affecting pkg:golang/golang.org/x/image/webp

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.6%	CVE-2026-46601golang.org/x/image/webp · Out-of-bounds Read High7.5EPSS 0.6%2026-06-25CVE Database V5CVE-2026-46601 The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size. EPSS 0.6%Vulnerability CWE-125	CVE Database V5	2026-06-25
High	7.5	EPSS 0.3%	CVE-2026-33813golang.org/x/image/webp · Integer Overflow or Wraparound High7.5EPSS 0.3%2026-04-21CVE Database V5CVE-2026-33813 Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. EPSS 0.3%Vulnerability CWE-190	CVE Database V5	2026-04-21

Page 1 of 1