{"action":"Upgrade bugsink to 2.0.5 or later.","affected":[{"fixed":"2.0.5","introduced":"0"}],"component":"bugsink","cve_ids":["CVE-2025-64508"],"ecosystem":"PyPI","epss":0.00506,"exploited":false,"fixed_versions":["2.0.5"],"ghsa_id":"GHSA-fc2v-vcwj-269v","id":"tcs_01M5KFF0143GJZSFMG3359W15N","modified_at":"2026-07-07T17:57:28.581611571Z","published_at":"2025-11-13T00:10:50Z","references":["https://osv.dev/vulnerability/GHSA-fc2v-vcwj-269v","https://github.com/bugsink/bugsink/security/advisories/GHSA-fc2v-vcwj-269v","https://nvd.nist.gov/vuln/detail/CVE-2025-64508","https://github.com/google/brotli/issues/1327","https://github.com/google/brotli/issues/1375","https://github.com/bugsink/bugsink/pull/266","https://github.com/google/brotli/pull/1234","https://github.com/bugsink/bugsink/commit/3f65544aab3ad5303d97009136640de97b0676a5","https://github.com/google/brotli/commit/67d78bc41db1a0d03f2e763497748f2f69946627","https://github.com/bugsink/bugsink","https://github.com/google/brotli/releases/tag/v1.2.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fc2v-vcwj-269v","url":"https://osv.dev/vulnerability/GHSA-fc2v-vcwj-269v"}],"summary":"Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input"}