Red Hat Security AdvisoryRHSA-2026:2389
brotli security update
Released 2026-02-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) brotli-devel-1.0.6-4.el8_10, python3-brotli-1.0.6-4.el8_10
- Red Hat Enterprise Linux BaseOS (v. 8) brotli-1.0.6-4.el8_10
Fixes 1 record
Priority HIGH 72
Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00533 · Published 2025-10-31 · Partial fix · 1.2.0, 2.13.4 CWE-400
