diff --git a/advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json b/advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json index 9d6c092cbe6..8a8d32a2cda 100644 --- a/advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json +++ b/advisories/github-reviewed/2026/10/GHSA-9v8h-qqgm-4m35/GHSA-9v8h-qqgm-4m35.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9v8h-qqgm-4m35", - "modified": "2026-10-23T19:08:09Z", + "modified": "2026-10-23T19:08:11Z", "published": "2026-10-22T15:32:49Z", "aliases": [], "summary": "Brotli: Out-of-bounds write in the Brotli decoder (\"Node2Shell\") also affects the PyPI Brotli package", @@ -23,7 +23,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "1.0.3" + "introduced": "0.5.2" }, { "fixed": "1.2.1" @@ -42,7 +42,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "1.0.3" + "introduced": "0.8.0" }, { "fixed": "1.2.1.0" @@ -124,7 +124,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-252" + "CWE-252", + "CWE-787" ], "severity": "CRITICAL", "github_reviewed": true,