Red Hat Security AdvisoryRHSA-2026:0008
brotli security update
Released 2026-01-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) brotli-1.1.0-6.el10_0.1, brotli-devel-1.1.0-6.el10_0.1, python3-brotli-1.1.0-6.el10_0.1
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) brotli-1.1.0-6.el10_0.1, libbrotli-1.1.0-6.el10_0.1
Fixes 1 record
Priority HIGH 72
Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00533 · Published 2025-10-31 · Partial fix · 1.2.0, 2.13.4 CWE-400
