opencv-python-headless (pypi) has 10 known vulnerabilities, the worst rated HIGH. No single fixed version is recorded that clears every advisory, so check each one below. No malicious-package signal is recorded.
6 published models carry an advisory from this package
0 pin a version the advisory is confirmed against; the rest declare it without a version.
| akhilaaa3/Jev-Omni | HIGHnot pinned |
| nvidia/NVIDIA-Nemotron-Parse-2.0 | HIGHnot pinned |
7 published models
7 declared · 0 observed · 0 inferred
| Model | Evidence |
|---|---|
| akhilaaa3/Jev-Omni | declared |
| interfaze-ai/interfaze-1-lite | declared |
7 published AI models are associated with this package: 7 name it in a requirements or pyproject file, 0 load it or import it directly, and 0 are inferred from the runtime stack their declared library pulls in. Only 2 state a version requirement, so this is not a count of affected models.
CVSS v3.1 base score out of 10
chance of exploitation in 30 days
CyberXYZ composite out of 10
fig. 01 — GHSA-jh2j-j4j9-crg3, the advisory selected below
opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863.
Full advisory text at GitHub advisory.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CyberXYZ does not call a package safe in absolute terms. It records 10 known vulnerabilities for opencv-python-headless (pypi), the worst rated HIGH, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Yes. CyberXYZ records 10 known vulnerabilities for opencv-python-headless (pypi), the worst rated HIGH. These include GHSA-jh2j-j4j9-crg3, GHSA-q799-q27x-vp7w, GHSA-fw99-f933-rgh8, GHSA-8849-5h85-98qw, GHSA-3448-vrgh-85xr.
Search opencv-python-headless in CyberXYZ Check at https://cyberxyz.io/check?q=opencv-python-headless. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 08:24 UTC. The most recent advisory here was published 2024-08-30. Updated continuously from NVD, GHSA, OSV and CNA feeds.