Analysis · Retrospective 2023
WebP decoding reaches well beyond the browser
CVE-2023-4863 required inventory of browsers, embedded renderers and image-processing workers.
Search the library
Find a product, vulnerability or security question in the published record.
Search results
2 results for CVE-2023-4863.
Analysis · Retrospective 2021
Log4Shell: the dependency inventory that patching could not replace
A retrospective on embedded Java dependencies, incomplete early fixes and the evidence needed to close a remediation ticket.