thumbnail Vulnerability in popular ‘libwebp’ code more widespread than expected