Поиск уязвимостей
Количество 50
Количество 50
GHSA-9v8h-qqgm-4m35
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-111497
Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) ...
openSUSE-SU-2026:22213-1
Security update for brotli
SUSE-SU-2026:4945-1
Security update for brotli
RLSA-2026:90501
Important: brotli security update
RLSA-2026:90495
Important: brotli security update
RLSA-2026:90449
Important: brotli security update
ELSA-2026-90501
ELSA-2026-90501: brotli security update (IMPORTANT)
ELSA-2026-90495
ELSA-2026-90495: brotli security update (IMPORTANT)
ELSA-2026-90449
ELSA-2026-90449: brotli security update (IMPORTANT)
ELSA-2026-500520
ELSA-2026-500520: nodejs:24 security update (IMPORTANT)
ELSA-2026-500519
ELSA-2026-500519: nodejs:22 security update (IMPORTANT)
ELSA-2026-500518
ELSA-2026-500518: nodejs:24 security update (IMPORTANT)
ELSA-2026-500517
ELSA-2026-500517: nodejs:22 security update (IMPORTANT)
ELSA-2026-500516
ELSA-2026-500516: nodejs22 security update (IMPORTANT)
ELSA-2026-500515
ELSA-2026-500515: nodejs24 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-9v8h-qqgm-4m35 Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package | CVSS3: 9.8 | 83% Высокий | 17 дней назад |
 | CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | CVSS3: 9.8 | 83% Высокий | 17 дней назад |
 | CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | CVSS3: 8.1 | 83% Высокий | 17 дней назад |
 | CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | CVSS3: 9.8 | 83% Высокий | 17 дней назад |
 | CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder | CVSS3: 8.1 | 83% Высокий | 14 дней назад |
| CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) ... | CVSS3: 9.8 | 83% Высокий | 17 дней назад |
 | openSUSE-SU-2026:22213-1 Security update for brotli | 83% Высокий | 7 дней назад | |
| SUSE-SU-2026:4945-1 Security update for brotli | 83% Высокий | 10 дней назад | |
 | RLSA-2026:90501 Important: brotli security update | 83% Высокий | 10 дней назад | |
| RLSA-2026:90495 Important: brotli security update | 83% Высокий | 10 дней назад | |
| RLSA-2026:90449 Important: brotli security update | 83% Высокий | 10 дней назад | |
| ELSA-2026-90501 ELSA-2026-90501: brotli security update (IMPORTANT) | 83% Высокий | 13 дней назад | |
| ELSA-2026-90495 ELSA-2026-90495: brotli security update (IMPORTANT) | 83% Высокий | 7 дней назад | |
| ELSA-2026-90449 ELSA-2026-90449: brotli security update (IMPORTANT) | 83% Высокий | 13 дней назад | |
| ELSA-2026-500520 ELSA-2026-500520: nodejs:24 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500519 ELSA-2026-500519: nodejs:22 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500518 ELSA-2026-500518: nodejs:24 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500517 ELSA-2026-500517: nodejs:22 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500516 ELSA-2026-500516: nodejs22 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500515 ELSA-2026-500515: nodejs24 security update (IMPORTANT) | 83% Высокий | 14 дней назад |
Уязвимостей на страницу