Vulnerabilities for brotli

No release of brotli is currently known to be free of vulnerabilities.

Details

• GHSA-2qfp-q593-84842025-10-31

  Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

  Fixed in: 1.2.0, 2.13.4

• GHSA-5v8v-66v8-mwm72022-05-24

  Integer overflow in the bundled Brotli C library

  Fixed in: 1.0.9, 3.1.23, 5.0.15, 6.0.3, 1.0.8