webp_server_go vulnerabilities

CVEs whose affected-version data names the webp_server_go package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-53779High· 7.5

3mo ago

WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows

WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMG_PATH directory by sending requests with percent-encoded backslashes (%5C) tha…

▾ Twilightwebp-sh · webp_server_goEPSS 0.59%via CVEORG