Skip to content
cve.new Create a CVE report

brotli

Follow this package

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

brotli PyPI
Affected range Recorded fix
From 1.0.3 before 1.2.1Ecosystem versions1.2.1

Version evidence: OSV · GHSA-9v8h-qqgm-4m35

View original version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "1.0.3"
        },
        {
          "fixed": "1.2.1"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "1.0.4",
    "1.0.6",
    "1.0.7",
    "1.0.8",
    "1.0.9",
    "1.1.0",
    "1.2.0"
  ]
}
brotli PyPI
Affected range Recorded fix
Earlier releases before 1.2.1Ecosystem versions1.2.1

Version evidence: OSV · PYSEC-2026-4322

View original version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "1.2.1"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "0.5.2",
    "0.6.0",
    "1.0.1",
    "1.0.4",
    "1.0.6",
    "1.0.7",
    "1.0.8",
    "1.0.9",
    "1.1.0",
    "1.2.0"
  ]
}