Security feed

patchSecurity fix · Unratedoss-security

Brotli release v1.2.1

Google Brotli published a library release addressing a vulnerability that also affects consumers of the library.

Announced

Machine-extracted · Revision 1Original source
Evidence and details

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

https://github.com/google/brotli/releases/tag/v1.2.1 has been published for the library itself.

Google brotli

underlying problem is not restricted to Node.js alone, but rather in Google brotli
Affected versions
Not stated in this extraction
Fixed versions
v1.2.1
https://github.com/google/brotli/releases/tag/v1.2.1 has been published for the library itself.
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2026-111497
Node.js Brotli decoder out-of-bounds write permits remote code execution (CVE-2026-111497)

Publisher severity

No explicit severity was extracted.

Event
#19308 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement