All products

brotli

PyPI · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli packageCVE-2026-111497 · GHSA-9V8H-QQGM-4M35Version ranges need review. github.com/andybalholm/brotlibrotli GoPyPIRed Hat Critical Fix reported
Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementationCVE-2025-6176 · GHSA-2QFP-Q593-8484Version ranges need review. brotliscrapy PyPIRed Hat High Fix reported
Integer overflow in the bundled Brotli C libraryCVE-2020-8927 · GHSA-5V8V-66V8-MWM7 compu-brotli-sysmicrosoft.netcore.app.runtime.aot.linux-x64.cross.android-arm64 Rust / CargoNuGetPyPI Medium Fix reported