4 ms·
I believe they are referring to CVE-2023-4863[1], see the fix commit[2] in libwebp. I imagine the issue would also impact Electron, which might be the actual r
by garblegarble 3y ago
I believe they are referring to CVE-2023-4863[1], see the fix commit[2] in libwebp.
I imagine the issue would also impact Electron, which might be the actual reason for blocking the format if they use that for some/all of their client apps (assuming the OP's claim is correct, I don't use it so can't check myself), because I'd like to think they could push out a back-end deployment quickly.
1: https://nvd.nist.gov/vuln/detail/CVE-2023-4863 https://nvd.nist.gov/vuln/detail/CVE-2023-4863
2: https://chromium.googlesource.com/webm/libwebp/+/902bc91 https://chromium.googlesource.com/webm/libwebp/+/902bc91