search

drewnoakes / metadata-extractor

Extracts Exif, IPTC, XMP, ICC and other metadata from image, video and audio files
Apache License 2.0
2.57k stars 481 forks source link

Any Plan to update libwebp library ? #629

Closed Vigneshwaran082 closed 12 months ago

Vigneshwaran082 commented 12 months ago

"From the file 'WebpRiffHandler.java', it appears that this project is using the libwebp library indirectly. Is there any plan to upgrade this library, as 'libwebp' has a high-security vulnerability?" [https://nvd.nist.gov/vuln/detail/CVE-2023-4863]

drewnoakes commented 12 months ago

We aren't using that library:

https://github.com/drewnoakes/metadata-extractor/blob/master/Source/com/drew/metadata/webp/WebpRiffHandler.java

An I missing something?

drewnoakes commented 12 months ago

I don't see any action to take here, so closing.