{"id":"CVE-2020-8927","aliases":["ALPINE-CVE-2020-8927","ALSA-2021:1702","ALSA-2022:0827","ALSA-2022:0830","AZL-6341","BELL-CVE-2020-8927","BIT-brotli-2020-8927","BIT-dotnet-2020-8927","BIT-dotnet-sdk-2020-8927","BIT-powershell-2020-8927","DEBIAN-CVE-2020-8927","DLA-2476-1","DSA-4801-1","EUVD-2020-0057","GHSA-5v8v-66v8-mwm7","GO-2025-3726","MGASA-2020-0385","PYSEC-2020-29","RHSA-2021:1702","RHSA-2022:0827","RHSA-2022:0828","RHSA-2022:0829","RHSA-2022:0830","RLSA-2021:1702","RLSA-2022:0827","RLSA-2022:0830","RUSTSEC-2021-0131","RUSTSEC-2021-0132","SUSE-SU-2021:3942-1","SUSE-SU-2023:3669-1","SUSE-SU-2023:3670-1","SUSE-SU-2023:3827-1","SUSE-SU-2024:1968-1","SUSE-SU-2025:01762-1","UBUNTU-CVE-2020-8927","USN-4568-1","openSUSE-SU-2020:1578-1","openSUSE-SU-2021:3942-1","openSUSE-SU-2024:11708-1","openSUSE-SU-2024:13224-1","openSUSE-SU-2026:11988-1"],"status":"published","title":"Buffer overflow in Brotli library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.03217,"percentile":0.88294,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-120","CWE-130"],"published":"2020-09-15T09:15:12Z","modified":"2026-10-29T11:01:15Z","exploits":[{"source":"pocgithub","id":"federiconbaez/cortex9-brotli-uncompressed-copy-narrowing-model","title":"federiconbaez/cortex9-brotli-uncompressed-copy-narrowing-model","date":"2026-11-09","url":"https://github.com/federiconbaez/cortex9-brotli-uncompressed-copy-narrowing-model"}],"fixes":[{"ecosystem":"crates.io","package":"compu-brotli-sys","fixed_in":["1.0.9"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","fixed_in":["3.1.23","5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","fixed_in":["3.1.23","5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","fixed_in":["3.1.23","5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","fixed_in":["3.1.23","5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","fixed_in":["3.1.23","5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","fixed_in":["3.1.23","5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","fixed_in":["3.1.23","5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","fixed_in":["3.1.23","5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","fixed_in":["3.1.23","5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.browser-wasm","fixed_in":["5.0.15"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","fixed_in":["5.0.15","6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.browser-wasm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvos-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.win-x64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.win-x86","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-arm64","fixed_in":["6.0.3"],"sources":["ghsa"]},{"ecosystem":"PyPI","package":"brotli","fixed_in":["1.0.8"],"sources":["ghsa"]},{"ecosystem":"Alpine:v3.12","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"brotli","fixed_in":["1.0.9-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"brotli","fixed_in":["1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"brotli-devel","fixed_in":["1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-brotli","fixed_in":["1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"brotli","fixed_in":["1.0.7-10"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"brotli","fixed_in":["1.0.9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"brotli","fixed_in":["1.0.9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"brotli","fixed_in":["1.0.9-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"brotli","fixed_in":["0.5.2+dfsg-2+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"brotli","fixed_in":["1.0.7-2+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"brotli","fixed_in":["1.0.7-2.1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"brotli-debuginfo","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"brotli-debugsource","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"brotli-devel","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-brotli","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-brotli-debuginfo","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"brotli","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"brotli-debuginfo","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"brotli-debugsource","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-brotli-debuginfo","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"brotli","fixed_in":["0:1.0.6-3.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"brotli","fixed_in":["1.0.7-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"brotli","fixed_in":["1.0.7-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-brotlipy","fixed_in":["0.7.0-150100.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-brotlipy","fixed_in":["0.7.0-150100.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-brotlipy","fixed_in":["0.6.0-2.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-brotlipy","fixed_in":["0.7.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-brotlipy","fixed_in":["0.7.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-brotlipy","fixed_in":["0.7.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-brotlipy","fixed_in":["0.7.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-brotlipy","fixed_in":["0.7.0-150300.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"python-Brotli","fixed_in":["1.0.7-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"python-Brotli","fixed_in":["1.0.7-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-Brotli","fixed_in":["1.0.7-150200.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"brotli","fixed_in":["1.0.7-3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"brotli","fixed_in":["1.0.3-1ubuntu1~16.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"brotli","fixed_in":["1.0.3-1ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"brotli","fixed_in":["1.0.7-6ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"brotli","fixed_in":["1.0.9-lp152.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"brotli","fixed_in":["1.0.7-3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cargo-audit-advisory-db","fixed_in":["20220105-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-Brotli","fixed_in":["1.2.0-1.6"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"compu-brotli-sys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.browser-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.browser-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvos-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"brotli-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-5.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-10"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"brotli","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Bitnami","package":"dotnet","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"bundled":2},{"source":"osv","ecosystem":"Bitnami","package":"dotnet-sdk","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"bundled":2},{"source":"osv","ecosystem":"Bitnami","package":"powershell","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.0.9"},{"introduced":"7.1.0"},{"fixed":"7.1.6"},{"introduced":"7.2.0"},{"fixed":"7.2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2+dfsg-2+deb9u1"}]}],"versions":["0.5.2+dfsg-2"]},{"source":"osv","ecosystem":"Debian:10","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-2+deb10u1"}]}],"versions":["1.0.7-2"]},{"source":"osv","ecosystem":"crates.io","package":"compu-brotli-sys","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.9"}]}],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.23"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.browser-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.15"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3"}]}],"versions":["6.0.0","6.0.1","6.0.2"],"bundled":2},{"source":"osv","ecosystem":"PyPI","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8"}]}],"versions":["0.5.2","0.6.0","1.0.1","1.0.4","1.0.6","1.0.7"],"bundled":2},{"source":"osv","ecosystem":"Go","package":"github.com/google/brotli","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-2.1.mga7"}]}]},{"source":"osv","ecosystem":"PyPI","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8"}]}],"versions":["0.5.2","0.6.0","1.0.1","1.0.4","1.0.6","1.0.7"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"brotli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"brotli-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"brotli-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-brotli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"brotli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"brotli-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-brotli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.23-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.15-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-5.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet5.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-3.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.417-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.212-1.el8_5"}]}],"bundled":3},{"source":"osv","ecosystem":"crates.io","package":"brotli-sys","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}],"bundled":2},{"source":"osv","ecosystem":"crates.io","package":"compu-brotli-sys","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"1.0.9"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-brotlipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-150100.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-brotlipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-150100.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-brotlipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-2.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-brotlipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-brotlipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-brotlipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-brotlipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-brotlipy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-150300.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"python-Brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"python-Brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-Brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-150200.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1ubuntu1~16.04.2"}]}],"versions":["0.2.0+dfsg-1","0.3.0+dfsg-1","0.3.0+dfsg-2","0.3.0+dfsg-2ubuntu1","1.0.3-1ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1ubuntu1.3"}]}],"versions":["0.6.0-1build1","1.0.2-2","1.0.2-3","1.0.3-1ubuntu1","1.0.3-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-6ubuntu0.1"}]}],"versions":["1.0.7-2","1.0.7-2build1","1.0.7-4","1.0.7-5","1.0.7-6","1.0.7-6build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1ubuntu1~16.04.2"}]}],"versions":["0.2.0+dfsg-1","0.3.0+dfsg-1","0.3.0+dfsg-2","0.3.0+dfsg-2ubuntu1","1.0.3-1ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1ubuntu1.3"}]}],"versions":["0.6.0-1build1","1.0.2-2","1.0.2-3","1.0.3-1ubuntu1","1.0.3-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-6ubuntu0.1"}]}],"versions":["1.0.7-2","1.0.7-2build1","1.0.7-4","1.0.7-5","1.0.7-6","1.0.7-6build1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9-lp152.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cargo-audit-advisory-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220105-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-1.6"}]}]}],"affected_more":94,"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"google","product":"brotli"},{"vendor":"google llc","product":"brotli"},{"vendor":"microsoft","product":".net"},{"vendor":"microsoft","product":".net_core"},{"vendor":"microsoft","product":"powershell"},{"vendor":"microsoft","product":"visual_studio_2019"},{"vendor":"microsoft","product":"visual_studio_2022"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://github.com/google/brotli/releases/tag/v1.0.9","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory","web","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00108.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4568-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00003.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2020/dsa-4801","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8927","tags":["web","advisory"]},{"url":"https://github.com/bitemyapp/brotli2-rs/issues/45","tags":["web","report"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2021-0131.html","tags":["web","advisory"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2021-0132.html","tags":["web","advisory"]},{"url":"https://github.com/github/advisory-database/issues/785","tags":["web"]},{"url":"https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6","tags":["fix","web"]},{"url":"https://usn.ubuntu.com/4568-1","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2020-29.yaml","tags":["web"]},{"url":"https://github.com/google/brotli/releases/tag/v1.0.8","tags":["web"]},{"url":"https://github.com/advisories/GHSA-5v8v-66v8-mwm7","tags":["advisory","web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-8927","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-1702.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-8927","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-24464","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-24512","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-8927","tags":["advisory"]},{"url":"https://github.com/timlegge/perl-IO-Compress-Brotli/blob/8b44c83b23bb4658179e1494af4b725a1bc476bc/Changes#L52","tags":["web"]},{"url":"https://github.com/google/brotli/pull/826","tags":["fix"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-8927","tags":["advisory"]},{"url":"https://github.com/bitemyapp/brotli2-rs","tags":["package"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36846","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0385.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27406","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4568-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1702","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879225","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1702.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8927","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0827","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061854","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0827.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24464","tags":["advisory"]},{"url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24512","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24512","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24512","tags":["advisory"]},{"url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0828","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0828.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0829","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0829.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0830","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0830.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:1702","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0827","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0830","tags":["advisory"]},{"url":"https://crates.io/crates/brotli-sys","tags":["package"]},{"url":"https://crates.io/crates/compu-brotli-sys","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213942-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175825","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8927","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233669-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233670-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233827-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241968-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501762-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-8927","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/25MTVVM73V6W35S5ZGOBWISPZIE3DXIJ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EBYPFIZJBUFNGB65ETC2USVDXZRAANZW/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-8927","title":"Buffer overflow in Brotli library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2020-09-15T09:15:12Z","modified":"2026-05-29T20:52:34.416Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-130"],"updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2020-0057","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2020-09-15T09:15:12Z","modified":"2026-05-29T20:52:34Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:59.967985Z"}],"ghsa":[{"id":"GHSA-5v8v-66v8-mwm7","title":"Integer overflow in the bundled Brotli C library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2022-05-24T17:28:21Z","modified":"2024-09-16T14:29:05Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:38:02.773864Z"}],"nvd":[{"id":"CVE-2020-8927","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2020-09-15T10:15:12.887Z","modified":"2026-06-17T03:27:11.28Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-130","CWE-120"],"updated_at":"2026-11-02T14:06:14.981587Z"}],"osv":[{"id":"ALPINE-CVE-2020-8927","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2020-09-15T10:15:12.887Z","modified":"2026-10-26T11:17:55.191955985Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6341","title":"CVE-2020-8927 affecting package brotli for versions less than 1.0.7-10","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2020-09-15T10:15:12Z","modified":"2026-04-21T04:32:09.5126Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"BELL-CVE-2020-8927","title":"CVE-2020-8927 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:36.139141Z","modified":"2026-01-26T09:46:35.154481Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-36846","description":"A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2025-05-30T01:15:20.95Z","modified":"2026-10-20T14:13:58.442253756Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:16.936975Z"},{"id":"CVE-2020-8927","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2020-09-15T10:15:12.887Z","modified":"2026-10-24T10:50:07.10083843Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2020-8927","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2020-09-15T10:15:12.887Z","modified":"2026-10-26T12:02:10.034292678Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"GHSA-5v8v-66v8-mwm7","title":"Integer overflow in the bundled Brotli C library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2022-05-24T17:28:21Z","modified":"2026-09-10T03:49:47.62630546Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:46:38.911014Z"},{"id":"RHSA-2021:1702","title":"Red Hat Security Advisory: brotli security update","status":"published","published":"2024-09-16T05:19:29Z","modified":"2026-06-26T12:22:28.528178059Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2022:0827","title":"Red Hat Security Advisory: .NET Core 3.1 security and bugfix update","status":"published","published":"2024-09-16T07:33:25Z","modified":"2026-06-26T12:22:09.946164801Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0828","title":"Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T07:33:48Z","modified":"2026-05-28T10:01:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0829","title":"Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T07:33:40Z","modified":"2026-05-28T10:01:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0830","title":"Red Hat Security Advisory: .NET 5.0 security and bugfix update","status":"published","published":"2024-09-16T07:33:32Z","modified":"2026-06-26T12:21:17.244103062Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2021:1702","title":"Moderate: brotli security update","description":"Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. \n\nSecurity Fix(es):\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:52:13Z","modified":"2026-02-04T22:30:04.596844Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2022:0827","title":"Important: .NET Core 3.1 security and bugfix update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.417 and .NET Runtime 3.1.23.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-10T14:44:29Z","modified":"2026-02-04T17:45:04.650672Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:0830","title":"Important: .NET 5.0 security and bugfix update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.212 and .NET Runtime 5.0.15.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-10T14:46:56Z","modified":"2026-02-04T12:30:06.310739Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2020-8927","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2020-09-15T10:15:00Z","modified":"2026-04-22T12:44:32.171175Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"ALSA-2021:1702","title":"Moderate: brotli security update","description":"Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. \n\nSecurity Fix(es):\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:52:13Z","modified":"2026-10-29T11:00:29.821628886Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:0827","title":"Important: .NET Core 3.1 security and bugfix update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.417 and .NET Runtime 3.1.23.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-10T14:44:29Z","modified":"2026-10-29T11:01:15.363646202Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:0830","title":"Important: .NET 5.0 security and bugfix update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.212 and .NET Runtime 5.0.15.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-03-10T14:46:56Z","modified":"2026-10-29T11:01:12.85839338Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-brotli-2020-8927","title":"Buffer overflow in Brotli library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2024-03-06T10:50:45.386Z","modified":"2026-09-10T16:01:10.656797329Z","updated_at":"2026-11-02T15:28:28.70813Z"},{"id":"BIT-dotnet-2020-8927","title":"Buffer overflow in Brotli library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2024-03-06T11:00:33.493Z","modified":"2026-09-10T16:01:00.030000717Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"BIT-dotnet-sdk-2020-8927","title":"Buffer overflow in Brotli library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2024-03-06T11:00:44.378Z","modified":"2026-09-10T16:00:59.306837112Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"BIT-powershell-2020-8927","title":"Buffer overflow in Brotli library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2025-09-04T17:48:34.485Z","modified":"2026-09-10T16:01:46.001675215Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"DLA-2476-1","title":"brotli - security update","status":"published","published":"2020-12-01T00:00:00Z","modified":"2026-03-09T01:19:36.629762Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4801-1","title":"brotli - security update","status":"published","published":"2020-12-01T00:00:00Z","modified":"2026-03-09T02:08:29.579184Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"GO-2025-3726","title":"IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library in github.com/google/brotli","description":"IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library in github.com/google/brotli","status":"published","published":"2025-06-03T17:57:59Z","modified":"2026-03-03T04:56:39.449382Z","updated_at":"2026-11-02T15:47:01.728182Z"},{"id":"MGASA-2020-0385","title":"Updated brotli packages fix security vulnerability","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an\nattacker controlling the input length of a \"one-shot\" decompression request to\na script can trigger a crash, which happens when copying over chunks of data\nlarger than 2 GiB (CVE-2020-8927).\n","status":"published","published":"2020-10-16T15:44:59Z","modified":"2026-04-16T04:44:13.433254978Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2020:1578-1","title":"Security update for brotli","description":"This update for brotli fixes the following issues:\n\nbrotli was updated to 1.0.9:\n\n* CVE-2020-8927: Fix integer overflow when input chunk is longer than 2GiB [boo#1175825]\n* `brotli -v` now reports raw / compressed size\n* decoder: minor speed / memory usage improvements\n* encoder: fix rare access to uninitialized data in ring-buffer\n","status":"published","published":"2020-09-29T18:12:59Z","modified":"2026-02-04T04:39:03.582641Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2021:3942-1","title":"Security update for brotli","description":"This update for brotli fixes the following issues:\n\n- CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).\n","status":"published","published":"2021-12-06T13:46:28Z","modified":"2026-02-04T02:27:34.641286Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11708-1","title":"cargo-audit-advisory-db-20220105-1.1 on GA media","description":"These are all security issues fixed in the cargo-audit-advisory-db-20220105-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:50:34.074186Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:13224-1","title":"python310-Brotli-1.1.0-1.1 on GA media","description":"These are all security issues fixed in the python310-Brotli-1.1.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:59:10.404183Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2026:11988-1","title":"python313-Brotli-1.2.0-1.6 on GA media","description":"These are all security issues fixed in the python313-Brotli-1.2.0-1.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-04T00:00:00Z","modified":"2026-10-05T10:15:29.643324396Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"PYSEC-2020-29","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2020-09-15T10:15:00Z","modified":"2026-06-10T17:00:38.605765812Z","updated_at":"2026-11-02T15:52:52.682031Z"},{"id":"RUSTSEC-2021-0131","title":"Integer overflow in the bundled Brotli C library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB.\n\nAn updated version of `brotli-sys` has not been released. If one cannot update the C library, its authors recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.\n\nIn Rust the issue can be mitigated by migrating to the `brotli` crate, which provides a Rust implementation of Brotli compression and decompression that is not affected by this issue.","status":"published","published":"2021-12-20T12:00:00Z","modified":"2025-09-04T18:27:28.943295Z","updated_at":"2026-11-02T15:53:39.492624Z"},{"id":"RUSTSEC-2021-0132","title":"Integer overflow in the bundled Brotli C library","description":"A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB.\n\nIf one cannot update the C library, its authors recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.","status":"published","published":"2021-12-20T12:00:00Z","modified":"2025-10-28T06:02:18Z","updated_at":"2026-11-02T15:53:39.492624Z"},{"id":"SUSE-SU-2021:3942-1","title":"Security update for brotli","description":"This update for brotli fixes the following issues:\n\n- CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).\n","status":"published","published":"2021-12-06T13:46:22Z","modified":"2026-02-04T03:45:01.184166Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2023:3669-1","title":"Security update for python-brotlipy","description":"This update for python-brotlipy fixes the following issues:\n\n- CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).\n","status":"published","published":"2023-09-19T09:50:19Z","modified":"2025-05-02T04:30:58.427716Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3670-1","title":"Security update for python-brotlipy","description":"This update for python-brotlipy fixes the following issues:\n\n- CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).\n","status":"published","published":"2023-09-19T09:50:34Z","modified":"2025-05-02T04:30:58.487854Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3827-1","title":"Security update for python-brotlipy","description":"This update for python-brotlipy fixes the following issues:\n\n- CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).\n","status":"published","published":"2023-09-27T17:03:32Z","modified":"2026-02-04T03:35:19.874832Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2024:1968-1","title":"Security update for python-Brotli","description":"This update for python-Brotli fixes the following issues:\n\n- CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB. (bsc#1175825)\n","status":"published","published":"2024-06-10T18:04:25Z","modified":"2026-02-04T03:24:28.048544Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2025:01762-1","title":"Security update for brotli","description":"This update for brotli fixes the following issues:\n\n- CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).\n","status":"published","published":"2025-05-29T20:55:26Z","modified":"2026-02-04T04:07:23.510992Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"USN-4568-1","title":"brotli vulnerability","description":"It was discovered that Brotli incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a crash.\n","status":"published","published":"2020-10-05T12:05:18Z","modified":"2026-04-22T10:09:00.546005Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}