Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/brotli@1.2.0-3?distro=trixie
purl pkg:deb/debian/brotli@1.2.0-3?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-5k7n-7c84-gkfx Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code. CVE-2016-1624
VCID-69ua-s6h2-3uhc A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits. BIT-brotli-2020-8927
BIT-dotnet-2020-8927
BIT-dotnet-sdk-2020-8927
BIT-powershell-2020-8927
CVE-2020-36846
CVE-2020-8927
GHSA-5v8v-66v8-mwm7
GO-2025-3726
PYSEC-2020-29
RUSTSEC-2021-0131
RUSTSEC-2021-0132
VCID-ywys-vj5p-ubbe Multiple vulnerabilities have been found in Firefox, Thunderbird, Network Security Services (NSS), and NetScape Portable Runtime (NSPR) with the worst of which may allow remote execution of arbitrary code. CVE-2016-1968

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:32:25.579371+00:00 Debian Importer Fixing VCID-5k7n-7c84-gkfx https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:57:57.541141+00:00 Debian Importer Fixing VCID-69ua-s6h2-3uhc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:08:55.074176+00:00 Debian Importer Fixing VCID-ywys-vj5p-ubbe https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:35:17.253140+00:00 Debian Importer Fixing VCID-5k7n-7c84-gkfx https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:10:10.544314+00:00 Debian Importer Fixing VCID-69ua-s6h2-3uhc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:34:30.406265+00:00 Debian Importer Fixing VCID-ywys-vj5p-ubbe https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:15:22.379240+00:00 Debian Importer Fixing VCID-5k7n-7c84-gkfx https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:13:19.399790+00:00 Debian Importer Fixing VCID-69ua-s6h2-3uhc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:10:33.823168+00:00 Debian Importer Fixing VCID-ywys-vj5p-ubbe https://security-tracker.debian.org/tracker/data/json 38.1.0