{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/brotli-1.1.0--v--1.1.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Brotli (1.0.3 \u003c= v \u003c 1.0.10)","Brotli (1.1.0 \u003c= v \u003c 1.1.1)","Brotli (1.2.0 \u003c= v \u003c 1.2.1)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","software-update"],"_cs_type":"advisory","_cs_vendors":["Google"],"content_html":"\u003cp\u003eGoogle has released security updates for the Brotli compression library. The affected versions include 1.0.3 through 1.0.9, 1.1.0, and 1.2.0. Users and administrators are advised to update to versions 1.0.10, 1.1.1, or 1.2.1 respectively to mitigate security risks. The source advisory provides patch information but does not detail specific vulnerability classes or exploitation methods.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify applications or services in the environment that utilize the Brotli compression library as a dependency.\u003c/li\u003e\n\u003cli\u003eUpdate Brotli libraries to versions 1.0.10, 1.1.1, or 1.2.1 depending on the current branch in use.\u003c/li\u003e\n\u003cli\u003eMonitor the official Brotli GitHub repository for further security-related disclosures or patches.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T03:53:13Z","date_published":"2026-10-27T03:53:13Z","id":"https://feed.craftedsignal.io/briefs/2026-10-google-brotli-vulnerability/","summary":"Google has released security updates for the Brotli compression library to address vulnerabilities affecting multiple version branches.","title":"Google Brotli Compression Library Vulnerabilities","url":"https://feed.craftedsignal.io/briefs/2026-10-google-brotli-vulnerability/"}],"language":"en","title":"CraftedSignal Threat Feed - Brotli (1.1.0 \u003c= v \u003c 1.1.1)","version":"https://jsonfeed.org/version/1.1"}