Patch Brotli 1.2.1 Now: CVE-2026-111497 Hits Python, Node, Envoy
CVE-2026-111497 (CVSS 4.0: 9.2) is a Brotli decoder out-of-bounds write. Fixed in Brotli 1.2.1 and brotlicffi 1.2.1.0, but pip-audit won't flag it yet.
#brotli
1 post
1 post
CVE-2026-111497 (CVSS 4.0: 9.2) is a Brotli decoder out-of-bounds write. Fixed in Brotli 1.2.1 and brotlicffi 1.2.1.0, but pip-audit won't flag it yet.