javaKonloch/bytecode-viewer #479Not a task: already works

Webp

envgap__Konloch__bytecode-viewer-479

Original GitHub issue ↗Dated source checkout ↗Opened 2023-12-30

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit: aea66fea92aa07a592253531662c770fe2708069
Manifest: pom.xml
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

Konloch/bytecode-viewer #479 · read the original issue

Hello, noticed that this project for a reason I do not yet know includes a native library webp-imageio.dll, this hasn't been updated since september so I am wondering if its perhaps vulnerable to CVE-2023-4863 ?



Could you update it if its vulnerable or just remove it (since why does a decompiler need webp decoding support?, and plus its the only native library in the jar as far as I can tell besides darklaf)

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]