{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-0"}],"component":"brotli-sys","cve_ids":["CVE-2020-36846","CVE-2020-8927"],"ecosystem":"crates.io","epss":0.00661,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5v8v-66v8-mwm7","id":"tcs_01M5KF7G52SH5VJ6Q4R84VN9A8","modified_at":"2025-09-04T18:27:28.943295Z","published_at":"2021-12-20T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0131","https://crates.io/crates/brotli-sys","https://rustsec.org/advisories/RUSTSEC-2021-0131.html","https://github.com/bitemyapp/brotli2-rs/issues/45","https://github.com/google/brotli/releases/tag/v1.0.9"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0131","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0131"}],"summary":"Integer overflow in the bundled Brotli C library"}