← Packages
go-github-andybalholm-brotli
Pure Go Brotli encoder and decoder
- Current
- 1.2.5
- Candidate
- 1.3.0
- License
- MIT
Advisory · 1
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- Excessive memory allocation when decompressing crafted streams in github.com/andybalholm/brotliOSV
- Fixed events
- 1.2.7OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 82.6%FIRST
- KEV added
- 2026-10-27CISA
- Ransomware campaign use
- UnknownCISA
- Returned advisory
- GO-2026-6888OSV
- Aliases
- BIT-brotli-2026-111497, BIT-dotnet-2026-111497, BIT-dotnet-sdk-2026-111497, BIT-node-2026-111497, BIT-node-min-2026-111497, BIT-powershell-2026-111497, GHSA-9v8h-qqgm-4m35, GHSA-c9gr-gmg4-2vqv, GO-2026-6888, PYSEC-2026-4322, PYSEC-2026-4323OSV
- KEV
- YesCISA
Description
This package is a brotli compressor and decompressor implemented in Go. It was translated from the reference implementation ((https://github.com/google/brotli)) with the c2go tool at (https://github.com/andybalholm/c2go).
Changelog
PR · 6
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Checked | ||
Checked | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Metadata unavailable Comparable SPDX license expressions are missing; free text and RPM aggregate License are not compared. | Last attempted | |
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Checked |