BDBA Scan detected Vulnerabilities

[AnasMhaishHNC]

Hi!

Black Duck Binary Analysis has detected vulnerabilities with 3rd party libraries.

Could you please let us know the road map for updating this library for vulnerabilities remediation?
If the road map is unclear yet, could you please provide us with the security risk and impacts that these vulnerabilities have, and if we can accept them.

Thank you!

Name	Version
expat	2.2.9
freetype	2.10.1
libjpeg-turbo	2.0.0
libwebp	v0.6.1-rc2

Vulnerability URLs

1. expat:

• http://nvd.nist.gov/vuln/detail/CVE-2013-0340
• http://nvd.nist.gov/vuln/detail/CVE-2021-45960
• http://nvd.nist.gov/vuln/detail/CVE-2021-46143
• http://nvd.nist.gov/vuln/detail/CVE-2022-22822
• http://nvd.nist.gov/vuln/detail/CVE-2022-22823
• http://nvd.nist.gov/vuln/detail/CVE-2022-22824
• http://nvd.nist.gov/vuln/detail/CVE-2022-22825
• http://nvd.nist.gov/vuln/detail/CVE-2022-22826
• http://nvd.nist.gov/vuln/detail/CVE-2022-22827
• http://nvd.nist.gov/vuln/detail/CVE-2022-23852
• http://nvd.nist.gov/vuln/detail/CVE-2022-23990
• http://nvd.nist.gov/vuln/detail/CVE-2022-25235
• http://nvd.nist.gov/vuln/detail/CVE-2022-25236
• http://nvd.nist.gov/vuln/detail/CVE-2022-25313
• http://nvd.nist.gov/vuln/detail/CVE-2022-25314
• http://nvd.nist.gov/vuln/detail/CVE-2022-25315

2. freetype

• http://nvd.nist.gov/vuln/detail/CVE-2020-15999

3. libjpeg-turbo

• http://nvd.nist.gov/vuln/detail/CVE-2020-17541

4. libwebp

• http://nvd.nist.gov/vuln/detail/CVE-2018-25009
• http://nvd.nist.gov/vuln/detail/CVE-2018-25010
• http://nvd.nist.gov/vuln/detail/CVE-2018-25011
• http://nvd.nist.gov/vuln/detail/CVE-2018-25012
• http://nvd.nist.gov/vuln/detail/CVE-2018-25013
• http://nvd.nist.gov/vuln/detail/CVE-2018-25014
• http://nvd.nist.gov/vuln/detail/CVE-2020-36328
• http://nvd.nist.gov/vuln/detail/CVE-2020-36329
• http://nvd.nist.gov/vuln/detail/CVE-2020-36330
• http://nvd.nist.gov/vuln/detail/CVE-2020-36331
• http://nvd.nist.gov/vuln/detail/CVE-2020-36332