[icelusxl]

Seems to be reported by Apple and looks a lot like this security update: https://support.apple.com/en-us/HT213906

[masklinn]

Reported by Apple “and the citizen lab at the UoT Munk School”, which is exactly who’s attributed on the page you link to. So yeah seems pretty likely, either Apple uses libwebp internally in ImageIO or they made a similar mistake.

[saagarjha]

Former

[brigade]

It is interesting to see how different the reactions are now than last week