{"id":"BIT-dotnet-sdk-2026-111497","revision":null,"records":[{"revision":"a1f50e00ecbc4068a7470ca7ad0ffd2d","observedAt":"2026-11-10T14:21:22.41+00:00","statement":{"source":"cve-program","id":"CVE-2026-111497","aliases":[],"title":"Out-of-Bounds Write in Google Brotli Decoder","description":"A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.","state":0,"publishedAt":"2026-10-22T13:35:41.975+00:00","modifiedAt":"2026-11-10T12:50:00.309+00:00","affected":[{"ecosystem":"Vendor product","name":"github.com/google/brotli","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Google\",\n                    \"product\": \"Brotli\",\n                    \"packageName\": \"github.com/google/brotli\",\n                    \"repo\": \"https://github.com/google/brotli\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.0.3\",\n                            \"lessThan\": \"1.0.10\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.1.0\",\n                            \"lessThan\": \"1.1.1\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.2.0\",\n                            \"lessThan\": \"1.2.1\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.2,"severity":"CRITICAL"}],"references":["https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high","https://github.com/andybalholm/brotli/releases/tag/v1.2.7"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111497","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-111497","identifiers":["CVE-2026-111497"]},"retained":false,"historicalAffected":[]},{"revision":"7ac3a33081d846a484e75b806803749d","observedAt":"2026-11-12T01:57:23.771+00:00","statement":{"source":"euvd","id":"EUVD-2026-108169","aliases":["CVE-2026-111497","GHSA-9v8h-qqgm-4m35"],"title":"A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memo…","description":"A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.2,"severity":null}],"references":["https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high","https://github.com/andybalholm/brotli/releases/tag/v1.2.7"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108169","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 22, 2026, 1:35:41 PM","dateUpdated":"Nov 10, 2026, 12:50:00 PM"},"relatedAdvisories":[{"id":"SUSE-SU-2026:4928-1","title":"Security update for MozillaFirefox","vulnerabilityIds":["CVE-2026-100801","CVE-2026-111497","CVE-2026-113470","CVE-2026-117860","CVE-2026-117861","CVE-2026-117862","CVE-2026-117863","CVE-2026-117864","CVE-2026-117865","CVE-2026-117866","CVE-2026-117867","CVE-2026-117868","CVE-2026-117869","CVE-2026-117870","CVE-2026-117871","CVE-2026-117872","CVE-2026-117873","CVE-2026-117874","CVE-2026-117875","CVE-2026-117876","CVE-2026-117877","CVE-2026-117878","CVE-2026-117879","CVE-2026-117880","CVE-2026-117881","CVE-2026-117882","CVE-2026-117883","CVE-2026-117884","CVE-2026-117885","CVE-2026-117886","CVE-2026-117887","CVE-2026-117888","CVE-2026-117889","CVE-2026-117890","CVE-2026-117891","CVE-2026-117892","CVE-2026-117893","CVE-2026-117894","CVE-2026-117895","CVE-2026-117896","CVE-2026-117897","CVE-2026-117898","CVE-2026-117899","CVE-2026-117900","CVE-2026-117901","CVE-2026-117902","CVE-2026-117903","CVE-2026-117904","CVE-2026-117905","CVE-2026-117906","CVE-2026-117907","CVE-2026-117908","CVE-2026-117909","CVE-2026-117910","CVE-2026-117911","CVE-2026-117912","CVE-2026-117913","CVE-2026-117914","CVE-2026-117915","CVE-2026-117916","CVE-2026-117917","CVE-2026-117918","CVE-2026-117919","CVE-2026-117920","CVE-2026-117921","CVE-2026-117922","CVE-2026-117923","CVE-2026-117924","CVE-2026-117925","CVE-2026-117926","CVE-2026-117927","CVE-2026-117928","CVE-2026-117929","CVE-2026-117930","CVE-2026-117931","CVE-2026-117932","CVE-2026-117933","CVE-2026-117934","CVE-2026-117935","CVE-2026-117936","CVE-2026-117937","CVE-2026-117938","CVE-2026-117939","CVE-2026-117940","CVE-2026-117941","CVE-2026-117942","CVE-2026-117943","CVE-2026-117944","CVE-2026-117945","CVE-2026-117946","CVE-2026-117947","CVE-2026-117948","CVE-2026-117949","CVE-2026-117950","CVE-2026-117951","CVE-2026-117952","CVE-2026-117953","CVE-2026-117954","CVE-2026-117955","CVE-2026-117956","CVE-2026-117957","CVE-2026-117958","CVE-2026-117959","CVE-2026-117960","CVE-2026-117961","CVE-2026-117962","CVE-2026-117963","CVE-2026-117964","CVE-2026-117965","CVE-2026-117966","CVE-2026-117967","CVE-2026-117968","CVE-2026-117969","CVE-2026-117970","CVE-2026-117971","CVE-2026-117972","CVE-2026-117973","CVE-2026-117974","CVE-2026-117975","CVE-2026-117976","CVE-2026-117977","CVE-2026-117978","CVE-2026-117979","CVE-2026-117980","CVE-2026-117981","CVE-2026-117982","CVE-2026-117983","CVE-2026-117984","CVE-2026-117985","CVE-2026-117986","CVE-2026-117987","CVE-2026-117988","CVE-2026-117989","CVE-2026-117990","CVE-2026-117991","CVE-2026-117992","CVE-2026-117993","CVE-2026-117994","CVE-2026-117995","CVE-2026-117996","CVE-2026-117997","CVE-2026-117998","CVE-2026-117999","CVE-2026-118000","CVE-2026-118002","CVE-2026-118003","CVE-2026-118004"]},{"id":"RHSA-2026:94459","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (CPU)","vulnerabilityIds":["CVE-2025-8869","CVE-2025-13327","CVE-2025-69418","CVE-2026-1703","CVE-2026-6653","CVE-2026-11979","CVE-2026-13346","CVE-2026-28390","CVE-2026-31790","CVE-2026-34182","CVE-2026-34183","CVE-2026-45445","CVE-2026-45447","CVE-2026-74860","CVE-2026-86138","CVE-2026-86140","CVE-2026-86142","CVE-2026-86143","CVE-2026-86144","CVE-2026-86145","CVE-2026-89161","CVE-2026-96889","CVE-2026-103111","CVE-2026-111497","CVE-2026-114406"]},{"id":"openSUSE-SU-2026:12353-1","title":"trufflehog-3.99.7-1.1 on GA media","vulnerabilityIds":["CVE-2026-111497"]},{"id":"sca-2026-0017","title":"SICK Products affected by Brotli Vulnerability (Broccoli2Shell)","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:87420","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:17690","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:10766","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:92420","title":"Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-111497","CVE-2026-114148"]},{"id":"RHSA-2026:90893","title":"Red Hat Security Advisory: brotli security update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:19463","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:19655","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:94469","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (CUDA 12.9)","vulnerabilityIds":["CVE-2026-44172","CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:94101","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:90890","title":"Red Hat Security Advisory: brotli security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:91709","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","vulnerabilityIds":["CVE-2026-111497","CVE-2026-114148"]},{"id":"RHSA-2026:92861","title":"Red Hat Security Advisory: Satellite 6.19 security update","vulnerabilityIds":["CVE-2026-15307","CVE-2026-18660","CVE-2026-19203","CVE-2026-56853","CVE-2026-59646","CVE-2026-68497","CVE-2026-73619","CVE-2026-78667","CVE-2026-78669","CVE-2026-78677","CVE-2026-84445","CVE-2026-87819","CVE-2026-89407","CVE-2026-89425","CVE-2026-94440","CVE-2026-96640","CVE-2026-96643","CVE-2026-96778","CVE-2026-97031","CVE-2026-97687","CVE-2026-97689","CVE-2026-110856","CVE-2026-110857","CVE-2026-110858","CVE-2026-110859","CVE-2026-111497","CVE-2026-111943","CVE-2026-112390","CVE-2026-112391","CVE-2026-112392","CVE-2026-112393","CVE-2026-112397","CVE-2026-112398","CVE-2026-112399","CVE-2026-112400","CVE-2026-112402","CVE-2026-112403","CVE-2026-112404","CVE-2026-112405","CVE-2026-112406","CVE-2026-112892","CVE-2026-112893","CVE-2026-112894","CVE-2026-112895","CVE-2026-112896","CVE-2026-112897","CVE-2026-114145"]},{"id":"RHSA-2026:90889","title":"Red Hat Security Advisory: brotli security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94457","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (Neuron)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:19462","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"SSA-045512","title":"SSA-045512: Node2Shell Vulnerability in Siemens Products","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:19461","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:90914","title":"Red Hat Security Advisory: brotli security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:19468","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:93908","title":"Red Hat Security Advisory: Red Hat build of Quarkus 3.27.6.SP2 release and security update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"WID-SEC-W-2026-4117","title":"Node.js: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2026-105481","CVE-2026-105482","CVE-2026-105483","CVE-2026-106069","CVE-2026-106070","CVE-2026-106071","CVE-2026-106072","CVE-2026-106073","CVE-2026-106074","CVE-2026-111497","CVE-2026-28330"]},{"id":"RHSA-2026:92376","title":"Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-101911","CVE-2026-102276","CVE-2026-102277","CVE-2026-102278","CVE-2026-105481","CVE-2026-105482","CVE-2026-105483","CVE-2026-106069","CVE-2026-106071","CVE-2026-106072","CVE-2026-106073","CVE-2026-106074","CVE-2026-111497"]},{"id":"RHSA-2026:93455","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-111497","CVE-2026-114148"]},{"id":"SUSE-SU-2026:24556-1","title":"Security update for brotli","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94455","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (CPU)","vulnerabilityIds":["CVE-2026-44172","CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:95508","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.78 bug fix and security update","vulnerabilityIds":["CVE-2025-47273","CVE-2026-16313","CVE-2026-28390","CVE-2026-34182","CVE-2026-42011","CVE-2026-42013","CVE-2026-45445","CVE-2026-45447","CVE-2026-59995","CVE-2026-59999","CVE-2026-60002","CVE-2026-80792","CVE-2026-89846","CVE-2026-98432","CVE-2026-111497"]},{"id":"RHSA-2026:15892","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"SSA-898633","title":"SSA-898633: Node2Shell Vulnerability in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94802","title":"Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage","vulnerabilityIds":["CVE-2026-8932","CVE-2026-12345","CVE-2026-19445","CVE-2026-19553","CVE-2026-34743","CVE-2026-59997","CVE-2026-59998","CVE-2026-60000","CVE-2026-77214","CVE-2026-88806","CVE-2026-97687","CVE-2026-97689","CVE-2026-102633","CVE-2026-111497","CVE-2026-114136","CVE-2026-114137","CVE-2026-114138","CVE-2026-114406","CVE-2026-118669"]},{"id":"openSUSE-SU-2026:12232-1","title":"brotli-1.2.1-1.1 on GA media","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:19131","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"NCSC-2026-0453","title":"Kwetsbaarheid in Google Brotli-decoder","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:10767","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:94476","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (CUDA)","vulnerabilityIds":["CVE-2025-8869","CVE-2025-13327","CVE-2025-69418","CVE-2026-1703","CVE-2026-3219","CVE-2026-6357","CVE-2026-6653","CVE-2026-11979","CVE-2026-13346","CVE-2026-28390","CVE-2026-31790","CVE-2026-34182","CVE-2026-34183","CVE-2026-45445","CVE-2026-45447","CVE-2026-74860","CVE-2026-86138","CVE-2026-86140","CVE-2026-86142","CVE-2026-86143","CVE-2026-86144","CVE-2026-86145","CVE-2026-89161","CVE-2026-96889","CVE-2026-103111","CVE-2026-111497","CVE-2026-114109","CVE-2026-114110","CVE-2026-114406"]},{"id":"RHSA-2026:90892","title":"Red Hat Security Advisory: brotli security update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94460","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Gaudi)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:93984","title":"Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.2 RHEL 10 Container Release.","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:90449","title":"Red Hat Security Advisory: brotli security update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94468","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (CUDA 13.0)","vulnerabilityIds":["CVE-2025-69418","CVE-2026-6653","CVE-2026-11979","CVE-2026-13346","CVE-2026-28390","CVE-2026-31790","CVE-2026-34182","CVE-2026-34183","CVE-2026-44172","CVE-2026-45445","CVE-2026-45447","CVE-2026-74860","CVE-2026-86138","CVE-2026-86140","CVE-2026-86142","CVE-2026-86143","CVE-2026-86144","CVE-2026-86145","CVE-2026-89161","CVE-2026-96889","CVE-2026-103111","CVE-2026-111497","CVE-2026-114406"]},{"id":"RHSA-2026:17689","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:94473","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Spyre)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:94452","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (TPU)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:17687","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:19464","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:92378","title":"Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-101911","CVE-2026-102276","CVE-2026-102277","CVE-2026-102278","CVE-2026-105481","CVE-2026-105482","CVE-2026-105483","CVE-2026-106069","CVE-2026-106071","CVE-2026-106072","CVE-2026-106073","CVE-2026-106074","CVE-2026-111497"]},{"id":"RHSA-2026:95655","title":"Red Hat Security Advisory: Satellite 6.16 EUS security update","vulnerabilityIds":["CVE-2026-15307","CVE-2026-73619","CVE-2026-89078","CVE-2026-93577","CVE-2026-96640","CVE-2026-96643","CVE-2026-96778","CVE-2026-97229","CVE-2026-97687","CVE-2026-97689","CVE-2026-104895","CVE-2026-110264","CVE-2026-110856","CVE-2026-110857","CVE-2026-110858","CVE-2026-110859","CVE-2026-111497","CVE-2026-112390","CVE-2026-112391","CVE-2026-112392","CVE-2026-112393","CVE-2026-112397","CVE-2026-112398","CVE-2026-112399","CVE-2026-112400","CVE-2026-112402","CVE-2026-112403","CVE-2026-112404","CVE-2026-112405","CVE-2026-112406","CVE-2026-112892","CVE-2026-112893","CVE-2026-112894","CVE-2026-112895","CVE-2026-112896","CVE-2026-112897","CVE-2026-114145","CVE-2026-115731","CVE-2026-115732"]},{"id":"RHSA-2026:92428","title":"Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-111497","CVE-2026-114148"]},{"id":"RHSA-2026:19704","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:94471","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (ROCm 7.14)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:94462","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (CPU)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:10757","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:95377","title":"Red Hat Security Advisory: OpenShift Container Platform 4.20.46 bug fix and security update","vulnerabilityIds":["CVE-2026-98432","CVE-2026-111497"]},{"id":"openSUSE-SU-2026:12322-1","title":"ghostscript-10.08.0-3.1 on GA media","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94464","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (Gaudi)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:92492","title":"Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-111497","CVE-2026-114148"]},{"id":"RHSA-2026:92510","title":"Red Hat Security Advisory: RHOAI 3.4.6 - Red Hat OpenShift AI","vulnerabilityIds":["CVE-2023-54404","CVE-2026-11822","CVE-2026-11824","CVE-2026-13717","CVE-2026-16221","CVE-2026-17106","CVE-2026-18446","CVE-2026-25681","CVE-2026-26007","CVE-2026-27136","CVE-2026-33814","CVE-2026-33818","CVE-2026-39821","CVE-2026-39834","CVE-2026-41178","CVE-2026-42502","CVE-2026-45819","CVE-2026-45820","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-57516","CVE-2026-59951","CVE-2026-63209","CVE-2026-63374","CVE-2026-65898","CVE-2026-67312","CVE-2026-67314","CVE-2026-67320","CVE-2026-67321","CVE-2026-69097","CVE-2026-69153","CVE-2026-73086","CVE-2026-73088","CVE-2026-73089","CVE-2026-73643","CVE-2026-75838","CVE-2026-75899","CVE-2026-75931","CVE-2026-75975","CVE-2026-76172","CVE-2026-76844","CVE-2026-77301","CVE-2026-78679","CVE-2026-82397","CVE-2026-83663","CVE-2026-84375","CVE-2026-84445","CVE-2026-85393","CVE-2026-85525","CVE-2026-87018","CVE-2026-90711","CVE-2026-91990","CVE-2026-92599","CVE-2026-93690","CVE-2026-93749","CVE-2026-94637","CVE-2026-96640","CVE-2026-96643","CVE-2026-96644","CVE-2026-96778","CVE-2026-96804","CVE-2026-97687","CVE-2026-97689","CVE-2026-102267","CVE-2026-102271","CVE-2026-102272","CVE-2026-102276","CVE-2026-102278","CVE-2026-102282","CVE-2026-104150","CVE-2026-104851","CVE-2026-105922","CVE-2026-106445","CVE-2026-106446","CVE-2026-109156","CVE-2026-109383","CVE-2026-109527","CVE-2026-109829","CVE-2026-109869","CVE-2026-109956","CVE-2026-110856","CVE-2026-110857","CVE-2026-110858","CVE-2026-110859","CVE-2026-111064","CVE-2026-111066","CVE-2026-111497","CVE-2026-112390","CVE-2026-112391","CVE-2026-112392","CVE-2026-112397","CVE-2026-112399","CVE-2026-112400","CVE-2026-112402","CVE-2026-112404","CVE-2026-112405","CVE-2026-112893","CVE-2026-112894","CVE-2026-112895","CVE-2026-112896","CVE-2026-112897","CVE-2026-112940","CVE-2026-114145"]},{"id":"RHSA-2026:93987","title":"Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.2 Release.","vulnerabilityIds":["CVE-2025-12999","CVE-2026-111497"]},{"id":"RHSA-2026:90891","title":"Red Hat Security Advisory: brotli security update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94467","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Rubin)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:94453","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Neuron)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:90495","title":"Red Hat Security Advisory: brotli security update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:93456","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-111497","CVE-2026-114148"]},{"id":"RHSA-2026:95656","title":"Red Hat Security Advisory: Satellite 6.17 security update","vulnerabilityIds":["CVE-2026-15307","CVE-2026-73619","CVE-2026-78677","CVE-2026-87819","CVE-2026-89078","CVE-2026-93577","CVE-2026-96640","CVE-2026-96643","CVE-2026-96778","CVE-2026-97229","CVE-2026-97687","CVE-2026-97689","CVE-2026-104895","CVE-2026-110264","CVE-2026-110856","CVE-2026-110857","CVE-2026-110858","CVE-2026-110859","CVE-2026-111497","CVE-2026-112390","CVE-2026-112391","CVE-2026-112392","CVE-2026-112393","CVE-2026-112397","CVE-2026-112398","CVE-2026-112399","CVE-2026-112400","CVE-2026-112402","CVE-2026-112403","CVE-2026-112404","CVE-2026-112405","CVE-2026-112406","CVE-2026-112892","CVE-2026-112893","CVE-2026-112894","CVE-2026-112895","CVE-2026-112896","CVE-2026-112897","CVE-2026-114145","CVE-2026-115731","CVE-2026-115732"]},{"id":"openSUSE-SU-2026:22210-1","title":"Security update for nodejs22","vulnerabilityIds":["CVE-2026-105481","CVE-2026-105482","CVE-2026-106069","CVE-2026-106072","CVE-2026-106073","CVE-2026-106074","CVE-2026-111497"]},{"id":"SSA-443410","title":"SSA-443410: Node2Shell Vulnerability in Industrial Edge Management Applications","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:93902","title":"Red Hat Security Advisory: Red Hat build of Quarkus 3.33.4.SP2 release and security update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94108","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Container Release Update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"openSUSE-SU-2026:22183-1","title":"Security update for python-Brotli","vulnerabilityIds":["CVE-2025-6176","CVE-2026-111497"]},{"id":"RHSA-2026:94458","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (TPU)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:19469","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:94465","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (ROCm 6.4)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:19467","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:93065","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94461","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (Spyre)","vulnerabilityIds":["CVE-2026-44172","CVE-2026-96889","CVE-2026-111497"]},{"id":"cisco-sa-oct2026-node-js-Jj3SQ19u","title":"Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026","vulnerabilityIds":["CVE-2026-111497","CVE-2026-105483","CVE-2026-106069","CVE-2026-105482"]},{"id":"RHSA-2026:93550","title":"Red Hat Security Advisory: RHOAI 3.4.6 - Red Hat OpenShift AI","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94472","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (ROCm 7.1)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"openSUSE-SU-2026:12439-1","title":"python313-autobahn-26.11.1-1.1 on GA media","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:93980","title":"Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94470","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (CUDA 13.0)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"openSUSE-SU-2026:22213-1","title":"Security update for brotli","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94454","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (TPU)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:17477","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"SUSE-SU-2026:4957-1","title":"Security update for nodejs22","vulnerabilityIds":["CVE-2026-105481","CVE-2026-105482","CVE-2026-106069","CVE-2026-106072","CVE-2026-106073","CVE-2026-106074","CVE-2026-111497"]},{"id":"RHSA-2026:92856","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update","vulnerabilityIds":["CVE-2026-84782","CVE-2026-111064","CVE-2026-111066","CVE-2026-111497"]},{"id":"RHSA-2026:94474","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (CUDA 12.9)","vulnerabilityIds":["CVE-2025-69418","CVE-2026-6653","CVE-2026-11979","CVE-2026-13346","CVE-2026-28390","CVE-2026-31790","CVE-2026-34182","CVE-2026-34183","CVE-2026-45445","CVE-2026-45447","CVE-2026-74860","CVE-2026-86138","CVE-2026-86140","CVE-2026-86142","CVE-2026-86143","CVE-2026-86144","CVE-2026-86145","CVE-2026-89161","CVE-2026-96889","CVE-2026-103111","CVE-2026-111497","CVE-2026-114406"]},{"id":"RHSA-2026:13537","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"openSUSE-SU-2026:12248-1","title":"corepack24-24.22.1-1.1 on GA media","vulnerabilityIds":["CVE-2026-105481","CVE-2026-105482","CVE-2026-105483","CVE-2026-106069","CVE-2026-106073","CVE-2026-106074","CVE-2026-111497"]},{"id":"RHSA-2026:90501","title":"Red Hat Security Advisory: brotli security update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:90888","title":"Red Hat Security Advisory: brotli security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:95657","title":"Red Hat Security Advisory: Satellite 6.18 security update","vulnerabilityIds":["CVE-2026-15307","CVE-2026-73619","CVE-2026-78677","CVE-2026-87819","CVE-2026-89078","CVE-2026-93577","CVE-2026-96640","CVE-2026-96643","CVE-2026-96778","CVE-2026-97229","CVE-2026-97687","CVE-2026-97689","CVE-2026-104895","CVE-2026-110264","CVE-2026-110856","CVE-2026-110857","CVE-2026-110858","CVE-2026-110859","CVE-2026-111497","CVE-2026-112390","CVE-2026-112391","CVE-2026-112392","CVE-2026-112393","CVE-2026-112397","CVE-2026-112398","CVE-2026-112399","CVE-2026-112400","CVE-2026-112402","CVE-2026-112403","CVE-2026-112404","CVE-2026-112405","CVE-2026-112406","CVE-2026-112892","CVE-2026-112893","CVE-2026-112894","CVE-2026-112895","CVE-2026-112896","CVE-2026-112897","CVE-2026-114145"]},{"id":"RHSA-2026:19542","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"SUSE-SU-2026:24476-1","title":"Security update for brotli","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94100","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update","vulnerabilityIds":["CVE-2026-111497"]},{"id":"SUSE-SU-2026:24518-1","title":"Security update for brotli","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:95523","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.55 bug fix and security update","vulnerabilityIds":["CVE-2026-98432","CVE-2026-111497"]},{"id":"RHSA-2026:93457","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-111497","CVE-2026-114148"]},{"id":"RHSA-2026:95408","title":"Red Hat Security Advisory: OpenShift Container Platform 4.21.42 bug fix and security update","vulnerabilityIds":["CVE-2026-98432","CVE-2026-111497"]},{"id":"RHSA-2026:17688","title":"Red Hat Security Advisory: firefox security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:95346","title":"Red Hat Security Advisory: OpenShift Container Platform 4.22.22 bug fix and security update","vulnerabilityIds":["CVE-2025-31936","CVE-2026-8458","CVE-2026-8932","CVE-2026-12080","CVE-2026-14456","CVE-2026-18798","CVE-2026-19630","CVE-2026-26007","CVE-2026-50252","CVE-2026-52929","CVE-2026-63072","CVE-2026-63076","CVE-2026-64597","CVE-2026-68376","CVE-2026-71226","CVE-2026-77206","CVE-2026-77207","CVE-2026-77214","CVE-2026-80824","CVE-2026-84782","CVE-2026-89777","CVE-2026-90003","CVE-2026-90011","CVE-2026-94300","CVE-2026-94453","CVE-2026-96888","CVE-2026-97313","CVE-2026-98222","CVE-2026-98320","CVE-2026-98364","CVE-2026-98432","CVE-2026-98466","CVE-2026-98725","CVE-2026-111497"]},{"id":"RHSA-2026:94466","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (ROCm)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"openSUSE-SU-2026:12305-1","title":"python313-Brotli-1.2.1-1.1 on GA media","vulnerabilityIds":["CVE-2026-111497"]},{"id":"RHSA-2026:94463","title":"Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (Spyre)","vulnerabilityIds":["CVE-2026-96889","CVE-2026-111497"]},{"id":"RHSA-2026:19466","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]},{"id":"RHSA-2026:19465","title":"Red Hat Security Advisory: thunderbird security update","vulnerabilityIds":["CVE-2026-6746","CVE-2026-6747","CVE-2026-6748","CVE-2026-6749","CVE-2026-6750","CVE-2026-6751","CVE-2026-6752","CVE-2026-6753","CVE-2026-6754","CVE-2026-6757","CVE-2026-6759","CVE-2026-6761","CVE-2026-6762","CVE-2026-6763","CVE-2026-6764","CVE-2026-6765","CVE-2026-6766","CVE-2026-6767","CVE-2026-6769","CVE-2026-6770","CVE-2026-6771","CVE-2026-6772","CVE-2026-6776","CVE-2026-6785","CVE-2026-6786","CVE-2026-111497"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-108169","identifiers":["EUVD-2026-108169","CVE-2026-111497","GHSA-9v8h-qqgm-4m35"]},"retained":false,"historicalAffected":[]},{"revision":"0dcd9b9f7887446b9e5e52f309f91e5e","observedAt":"2026-11-12T01:04:34.937+00:00","statement":{"source":"nvd","id":"CVE-2026-111497","aliases":[],"title":"A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memo…","description":"A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.","state":0,"publishedAt":"2026-10-22T14:17:37.19+00:00","modifiedAt":"2026-11-10T20:25:59.13+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · cve-coordination@google.com · Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":9.2,"severity":"CRITICAL"},{"system":"CVSS 3.1 · nvd@nist.gov · Primary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://github.com/andybalholm/brotli/releases/tag/v1.2.7","https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high","http://www.openwall.com/lists/oss-security/2026/10/23/25","http://www.openwall.com/lists/oss-security/2026/10/24/6","http://www.openwall.com/lists/oss-security/2026/10/26/12","http://www.openwall.com/lists/oss-security/2026/10/26/13","http://www.openwall.com/lists/oss-security/2026/10/26/16","http://www.openwall.com/lists/oss-security/2026/11/03/2","https://broccoli2shell.com/","https://github.com/advisories/GHSA-9v8h-qqgm-4m35","https://github.com/dotnet/announcements/issues/494","https://github.com/google/brotli/releases/tag/v1.0.10","https://github.com/google/brotli/releases/tag/v1.1.1","https://github.com/google/brotli/releases/tag/v1.2.1","https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html","https://patchtheplanet.org/brotli","https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497","https://cert-portal.siemens.com/productcert/html/ssa-045512.html","https://cert-portal.siemens.com/productcert/html/ssa-242944.html","https://cert-portal.siemens.com/productcert/html/ssa-443410.html","https://cert-portal.siemens.com/productcert/html/ssa-678870.html","https://cert-portal.siemens.com/productcert/html/ssa-898633.html","https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-111497","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Analyzed","weaknesses":["CWE-252","CWE-787"],"productCriteria":["cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*","cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","cpe:2.3:a:python-hyper:brotlicffi:*:*:*:*:*:python:*:*","cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:.net:11.0.0:preview1:*:*:*:*:*:*","cpe:2.3:a:microsoft:.net:11.0.0:preview2:*:*:*:*:*:*","cpe:2.3:a:microsoft:.net:11.0.0:preview3:*:*:*:*:*:*","cpe:2.3:a:microsoft:.net:11.0.0:preview4:*:*:*:*:*:*","cpe:2.3:a:microsoft:.net:11.0.0:preview5:*:*:*:*:*:*","cpe:2.3:a:microsoft:.net:11.0.0:preview6:*:*:*:*:*:*","cpe:2.3:a:microsoft:.net:11.0.0:preview7:*:*:*:*:*:*","cpe:2.3:a:microsoft:.net:11.0.0:rc1:*:*:*:*:*:*","cpe:2.3:a:microsoft:.net:11.0.0:rc2:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*","cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*","cpe:2.3:a:anthropic:bun:*:*:*:*:*:*:*:*","cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*","cpe:2.3:a:google:woff2:-:*:*:*:*:*:*:*","cpe:2.3:a:duckdb:duckdb:*:*:*:*:*:*:*:*","cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:arrow:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:arrow:27.0.0:dev:*:*:*:*:*:*","cpe:2.3:a:mcmilk:7-zip-zstd:*:*:*:*:*:*:*:*","cpe:2.3:a:7-zip:p7zip:*:*:*:*:*:*:*:*","cpe:2.3:a:andybalholm:brotli:*:*:*:*:*:go:*:*","cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:common_configurator:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:data_flow_monitoring:*:*:*:*:*:*:*:*","cpe:2.3:a:siemens:dataxess_configurator:*:*:*:*:*:*:*:*","cpe:2.3:a:siemens:edge_opc_ua_server_configurator:*:*:*:*:*:*:*:*","cpe:2.3:a:siemens:flow_creator_configurator:*:*:*:*:*:*:*:*","cpe:2.3:a:siemens:industrial_edge_cloud_connector_configurator:*:*:*:*:*:*:*:*","cpe:2.3:a:siemens:industrial_edge_databus_configurator:*:*:*:*:*:*:*:*","cpe:2.3:a:siemens:industrial_edge_hub:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:industrial_edge_management_cloud:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:comos_walkinside:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_braumat:8.2:update1:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_braumat:8.2:update2:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_braumat:8.2:update3:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_braumat:8.2:update4:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_braumat:8.2:update5:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_profiling_tool:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_sistar:8.2:update1:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_sistar:8.2:update2:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_sistar:8.2:update3:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_sistar:8.2:update4:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_sistar:8.2:update5:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_wincc_companion:-:*:*:*:*:-:*:*","cpe:2.3:a:siemens:simatic_wincc_runtime:-:*:*:*:professional:*:*:*","cpe:2.3:a:siemens:simatic_wincc_unified_for_industrial_edge:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_wincc_unified_siqence:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:tia_administrator:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:tia_project-server_web_administration_tool:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:user_management_component:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:hyperlynx:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:innexis_architecture_native_acceleration:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:insights_hub:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_connect_electronics:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_connect_manufacturing_operations_management:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_execution_core:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_execution_discrete:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_execution_foundation:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_execution_pharma:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_execution_process:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_intelligence:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_quality:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_rd\\&l:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:opcenter_x:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:pads_professional:-:*:*:*:essentials:*:*:*","cpe:2.3:a:siemens:pads_professional:-:*:*:*:student:*:*:*","cpe:2.3:a:siemens:pave360_automotive:2026:*:*:*:*:*:*:*","cpe:2.3:a:siemens:process_preparation_x:-:*:*:*:-:*:*:*","cpe:2.3:a:siemens:simcenter_executable_digital_twin:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:simcenter_studio:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:teamcenter:2412.0:*:*:*:*:*:*:*","cpe:2.3:a:siemens:teamcenter:2506.0:*:*:*:*:*:*:*","cpe:2.3:a:siemens:teamcenter:2512.0:*:*:*:*:*:*:*","cpe:2.3:a:siemens:teamcenter:2606.0:*:*:*:*:*:*:*","cpe:2.3:a:siemens:xpedition_designer:-:*:*:*:*:*:*:*","cpe:2.3:a:siemens:xpedition_enterprise:-:*:*:*:*:*:*:*"],"sourceDates":{"published":"2026-10-22T14:17:37.190","lastModified":"2026-11-10T20:25:59.130"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-111497","identifiers":["CVE-2026-111497"]},"retained":false,"historicalAffected":[]},{"revision":"e38c72e7a57e42d7ab3bb8e74fcaf1ee","observedAt":"2026-11-05T23:38:32.248+00:00","statement":{"source":"osv","id":"GO-2026-6888","aliases":["BIT-brotli-2026-111497","BIT-dotnet-2026-111497","BIT-dotnet-sdk-2026-111497","BIT-node-2026-111497","BIT-node-min-2026-111497","BIT-powershell-2026-111497","CVE-2026-111497","GHSA-9v8h-qqgm-4m35","GHSA-c9gr-gmg4-2vqv","PYSEC-2026-4322","PYSEC-2026-4323"],"title":"Excessive memory allocation when decompressing crafted streams in github.com/andybalholm/brotli","description":"In github.com/andybalholm/brotli before v1.2.7, the decompressor allocates memory for Huffman tables and block-type trees on every meta-block header without bounding the cumulative allocations relative to the input size. A small crafted brotli stream containing many empty meta-blocks with new Huffman trees can trigger hundreds of megabytes of allocations per kilobyte of input, leading to denial of service.","state":0,"publishedAt":"2026-11-05T22:55:15+00:00","modifiedAt":"2026-11-05T23:25:49.4348246+00:00","affected":[{"ecosystem":"Go","name":"github.com/andybalholm/brotli","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.2.7"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/andybalholm/brotli/security/advisories/GHSA-c9gr-gmg4-2vqv","https://github.com/andybalholm/brotli/commit/33c2a9884269798192b5ecf171288f98939dbe42","https://github.com/andybalholm/brotli/releases/tag/v1.2.7","https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6888","license":"OSV · upstream source license applies","key":"osv:GO-2026-6888","identifiers":["GO-2026-6888","BIT-brotli-2026-111497","BIT-dotnet-2026-111497","BIT-dotnet-sdk-2026-111497","BIT-node-2026-111497","BIT-node-min-2026-111497","BIT-powershell-2026-111497","CVE-2026-111497","GHSA-9v8h-qqgm-4m35","GHSA-c9gr-gmg4-2vqv","PYSEC-2026-4322","PYSEC-2026-4323"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-12T18:18:51.9610599+00:00","complete":true,"records":1779,"lastAttemptAt":"2026-11-12T18:18:51.9610599+00:00","lastSuccessAt":"2026-11-12T18:18:52.1359793+00:00","error":null,"lastVerifiedAt":"2026-11-12T18:18:52.1359803+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-64752486c567b55b31fb0d7225f5222bcd0019564ac0ac5f0649e242c7b19299-436983018a0f2d42a11c05b3b04ba98c8ad3664129731f383f79e8cf6a19e2f9","complete":true,"records":424774,"lastAttemptAt":"2026-11-12T18:16:42.0266239+00:00","lastSuccessAt":"2026-11-12T18:16:41.2671502+00:00","error":null,"lastVerifiedAt":"2026-11-12T18:16:42.0266239+00:00","snapshotPublishedAt":"2026-11-12T17:19:00+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-a6bc4e59bf274de6bccd2bd795defd8b","complete":true,"records":13775,"lastAttemptAt":"2026-11-12T18:19:15.1587038+00:00","lastSuccessAt":"2026-11-12T18:19:15.154+00:00","error":null,"lastVerifiedAt":"2026-11-12T18:19:15.154+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13828,"expectedIdentifiers":13828,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-12T18:18:51.9610599+00:00","complete":true,"records":1123,"lastAttemptAt":"2026-11-12T18:18:51.9610599+00:00","lastSuccessAt":"2026-11-12T18:18:54.878817+00:00","error":null,"lastVerifiedAt":"2026-11-12T18:18:54.8788175+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-c74733ed0c2f4bb3aa28f2921b528eb9","complete":true,"records":13775,"lastAttemptAt":"2026-11-12T18:19:14.2859916+00:00","lastSuccessAt":"2026-11-12T18:19:14.282+00:00","error":null,"lastVerifiedAt":"2026-11-12T18:19:14.282+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13828,"expectedIdentifiers":13828,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-3562b6c78fd1bd0f0b55daf66a0926ae24f65e462df7f6d928caad458fc696bf","complete":true,"records":9947,"lastAttemptAt":"2026-11-12T18:18:51.9148238+00:00","lastSuccessAt":"2026-11-11T04:27:43.6877707+00:00","error":null,"lastVerifiedAt":"2026-11-12T18:18:51.9148238+00:00","snapshotPublishedAt":"2026-11-11T03:32:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-4d60731753a2f72e455d1086e7203d0ef10843936dcc1cf2b45135e2caa204b0","complete":true,"records":2012,"lastAttemptAt":"2026-11-12T18:16:50.9322629+00:00","lastSuccessAt":"2026-11-12T18:16:50.7862525+00:00","error":null,"lastVerifiedAt":"2026-11-12T18:16:50.9322629+00:00","snapshotPublishedAt":"2026-11-12T17:48:11+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-0d57668ba92a2918d0664e89ea91d467f8e6a2bc6330923eb883b74ac42a14ec","complete":true,"records":3125,"lastAttemptAt":"2026-11-12T18:18:51.9276914+00:00","lastSuccessAt":"2026-11-12T15:18:36.6112732+00:00","error":null,"lastVerifiedAt":"2026-11-12T18:18:51.9276914+00:00","snapshotPublishedAt":"2026-11-12T14:48:37+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-5f552124b4be907bc00a2f540b60dd82b393dc198845ddee9ca4af23654583f8","complete":true,"records":231722,"lastAttemptAt":"2026-11-12T18:18:51.6701113+00:00","lastSuccessAt":"2026-11-12T18:18:50.0151941+00:00","error":null,"lastVerifiedAt":"2026-11-12T18:18:51.6701113+00:00","snapshotPublishedAt":"2026-11-12T17:33:22+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}