{"action":"Upgrade compu-brotli-sys to 1.0.9 or later.","affected":[{"fixed":"1.0.9","introduced":"0.0.0-0"}],"component":"compu-brotli-sys","cve_ids":["CVE-2020-36846","CVE-2020-8927"],"ecosystem":"crates.io","epss":0.00633,"exploited":false,"fixed_versions":["1.0.9"],"ghsa_id":"GHSA-5v8v-66v8-mwm7","id":"tcs_01M5KF7GTFD5G34B3182FH58ZM","modified_at":"2025-10-28T06:02:18Z","published_at":"2021-12-20T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0132","https://crates.io/crates/compu-brotli-sys","https://rustsec.org/advisories/RUSTSEC-2021-0132.html","https://github.com/google/brotli/releases/tag/v1.0.9"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0132","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0132"}],"summary":"Integer overflow in the bundled Brotli C library"}