CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LCVE-2020-8927
Medium (6.5). EPSS 3.2% chance of exploitation in the next 30 days. Fixed in compu-brotli-sys 1.0.9.
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.
Severity
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-120, CWE-130
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- fedoraproject:fedora
- google:brotli
- microsoft:.net
- microsoft:.net_core
- microsoft:powershell
- microsoft:visual_studio_2019
- microsoft:visual_studio_2022
- opensuse:leap
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-5v8v-66v8-mwm7 | crates.io | compu-brotli-sys | <1.0.9 | 1.0.9 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-arm | >=3.0.0 <3.1.23 | 3.1.23 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-arm64 | >=3.0.0 <3.1.23 | 3.1.23 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >=3.0.0 <3.1.23 | 3.1.23 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-x64 | >=3.0.0 <3.1.23 | 3.1.23 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.osx-x64 | >=3.0.0 <3.1.23 | 3.1.23 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-arm | >=3.0.0 <3.1.23 | 3.1.23 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-arm64 | >=3.0.0 <3.1.23 | 3.1.23 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-x64 | >=3.0.0 <3.1.23 | 3.1.23 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-x86 | >=3.0.0 <3.1.23 | 3.1.23 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.osx-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.browser-wasm | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-arm | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-arm64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.osx-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-arm | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-arm64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-x64 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-x86 | >=5.0.0 <5.0.15 | 5.0.15 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.osx-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.osx-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.win-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.Mono.win-x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.linux-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.osx-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.osx-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-arm | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-arm64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-x64 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | NuGet | Microsoft.NETCore.App.Runtime.win-x86 | >=6.0.0 <6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 | PyPI | brotli | <1.0.8 | 1.0.8 |
| GO-2025-3726 | Go | github.com/google/brotli | all versions | no fix published |
| PYSEC-2020-29 | PyPI | brotli | <1.0.8 | 1.0.8 |
| RUSTSEC-2021-0131 | crates.io | brotli-sys | >=0.0.0-0 | no fix published |
| RUSTSEC-2021-0132 | crates.io | compu-brotli-sys | >=0.0.0-0 <1.0.9 | 1.0.9 |
References
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00108.html
- https://github.com/google/brotli/releases/tag/v1.0.9
- https://lists.debian.org/debian-lts-announce/2020/12/msg00003.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/