{"action":"Upgrade compu-brotli-sys to 1.0.9 or later.","affected":[{"fixed":"1.0.9","introduced":"0"}],"component":"compu-brotli-sys","cve_ids":["CVE-2020-36846","CVE-2020-8927"],"ecosystem":"crates.io","epss":0.00661,"exploited":false,"fixed_versions":["1.0.9"],"ghsa_id":"GHSA-5v8v-66v8-mwm7","id":"tcs_01M5KET8DZPCJZ0MHC1TGG7JPD","modified_at":"2026-09-10T03:49:47.626305460Z","published_at":"2022-05-24T17:28:21Z","references":["https://osv.dev/vulnerability/GHSA-5v8v-66v8-mwm7","https://nvd.nist.gov/vuln/detail/CVE-2020-8927","https://github.com/bitemyapp/brotli2-rs/issues/45","https://github.com/github/advisory-database/issues/785","https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6","https://www.debian.org/security/2020/dsa-4801","https://usn.ubuntu.com/4568-1","https://rustsec.org/advisories/RUSTSEC-2021-0132.html","https://rustsec.org/advisories/RUSTSEC-2021-0131.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH","https://lists.debian.org/debian-lts-announce/2020/12/msg00003.html","https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2020-29.yaml","https://github.com/google/brotli/releases/tag/v1.0.9","https://github.com/google/brotli/releases/tag/v1.0.8","https://github.com/bitemyapp/brotli2-rs","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00108.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-5v8v-66v8-mwm7","url":"https://osv.dev/vulnerability/GHSA-5v8v-66v8-mwm7"}],"summary":"Integer overflow in the bundled Brotli C library"}