TI-2025-05586 CVE-2025-6176 · GHSA-2qfp-q593-8484
Brotli decompression bomb DoS in scrapy/scrapy
Priority HIGH 72
Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.