VYPR

XS::libbrotli

by Perl Foundation

CVEs (1)

  • CVE-2026-115946Nov 1, 2026
    risk 0.00cvss —epss —

    XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affected versions compile a bundled brotli into static archives that dependent XS modules link against at build time, rather than using the system library. The…