The dependency libjpeg 9b has critical CVEs #4150
Description
🐛 Bug
The version of the dependency libjpeg is pinned to <= 9b (#3787), but libjpeg 9b has critical CVEs listed below. All those issues are related to out-of-bound memory access with may cause unexpected application behavior. However, these issues are fixed in libjpeg 9d.
So do you have the plan to remove libjpeg pinning to enable users to use libjpeg 9d?