brotli
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- PyPI
- Vulnerability status
- 5 advisory(ies) without a verdict
Advisories (5)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-2qfp-q593-8484 Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation | < 1.2.0 | Undetermined |
| GHSA-9v8h-qqgm-4m35 Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package | 1.0.3 – < 1.2.1 | Undetermined |
| PYSEC-2020-29 A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a | < 1.0.8 | Undetermined |
| PYSEC-2026-2401 Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation | < 1.2.0 | Undetermined |
| PYSEC-2026-4322 Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package | < 1.2.1 | Undetermined |
Sources
| Source | Licence |
|---|