Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-36846 BIT-brotli-2020-8927BIT-dotnet-2020-8927BIT-dotnet-sdk-2020-8927BIT-powershell-2020-8927CVE-2020-8927EUVD-2025-16444GHSA-44qx-v2f9-7rq9GHSA-5v8v-66v8-mwm7GO-2025-3726PYSEC-2020-29RUSTSEC-2021-0131RUSTSEC-2021-0132

IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library

Published May 30, 2025 · Updated May 30, 2025 · Assigned by CPANSec

Vendor: TIMLEGGE Product: IO::Compress::Brotli Package: brotli Package: brotli-sys Package: compu-brotli-sys Package: github.com/google/brotli Package: libio-compress-brotli-perl Package: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm Package: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 Package: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 Package: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 Package: Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 Package: Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm Package: Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 Package: Microsoft.NETCore.App.Runtime.browser-wasm Package: Microsoft.NETCore.App.Runtime.linux-arm Package: Microsoft.NETCore.App.Runtime.linux-arm64 Package: Microsoft.NETCore.App.Runtime.linux-musl-arm Package: Microsoft.NETCore.App.Runtime.linux-musl-arm64 Package: Microsoft.NETCore.App.Runtime.linux-musl-x64 Package: Microsoft.NETCore.App.Runtime.linux-x64 Package: Microsoft.NETCore.App.Runtime.Mono.android-arm Package: Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 Package: Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 Package: Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 Package: Microsoft.NETCore.App.Runtime.Mono.android-arm64 Package: Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 Package: Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 Package: Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 Package: Microsoft.NETCore.App.Runtime.Mono.android-x64 Package: Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 Package: Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 Package: Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 Package: Microsoft.NETCore.App.Runtime.Mono.android-x86 Package: Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 Package: Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 Package: Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 Package: Microsoft.NETCore.App.Runtime.Mono.browser-wasm Package: Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 Package: Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 Package: Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 Package: Microsoft.NETCore.App.Runtime.Mono.ios-arm Package: Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 Package: Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 Package: Microsoft.NETCore.App.Runtime.Mono.ios-arm64 Package: Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 Package: Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 Package: Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 Package: Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 Package: Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 Package: Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 Package: Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 Package: Microsoft.NETCore.App.Runtime.Mono.linux-arm Package: Microsoft.NETCore.App.Runtime.Mono.linux-arm64 Package: Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 Package: Microsoft.NETCore.App.Runtime.Mono.linux-x64 Package: Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 Package: Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 Package: Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 Package: Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 Package: Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 Package: Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 Package: Microsoft.NETCore.App.Runtime.Mono.osx-x64 Package: Microsoft.NETCore.App.Runtime.osx-x64 Package: Microsoft.NETCore.App.Runtime.win-arm Package: Microsoft.NETCore.App.Runtime.win-arm64 Package: Microsoft.NETCore.App.Runtime.win-x64 Package: Microsoft.NETCore.App.Runtime.win-x86 Ecosystem: crates.io Ecosystem: Go Ecosystem: NuGet Ecosystem: PyPI Ecosystem: Ubuntu

Description

A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.

Affected products

VendorProductAffectedFixed
TIMLEGGE IO::Compress::Brotli < 0.007 0.007

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 libio-compress-brotli-perl No fix yet —
Ubuntu 26.04 LTS libio-compress-brotli-perl No fix yet —
Ubuntu 25.10 libio-compress-brotli-perl No fix yet —
Ubuntu 24.04 LTS libio-compress-brotli-perl No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250612T141001-1.1 openSUSE-SU-2025:15225-1

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io brotli-sys >= 0.0.0-0 — RUSTSEC-2021-0131
crates.io compu-brotli-sys >= 0.0.0-0, < 1.0.9 1.0.9 RUSTSEC-2021-0132
crates.io compu-brotli-sys < 1.0.9 1.0.9 GHSA-5v8v-66v8-mwm7
Go github.com/google/brotli all versions — GO-2025-3726
NuGet Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.browser-wasm >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-arm >= 3.0.0, < 3.1.23 3.1.23 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-arm >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-arm64 >= 3.0.0, < 3.1.23 3.1.23 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-arm64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 3.0.0, < 3.1.23 3.1.23 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-musl-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-x64 >= 3.0.0, < 3.1.23 3.1.23 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.linux-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-arm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.browser-wasm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.ios-arm >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.ios-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.linux-arm >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.linux-arm64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.linux-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 >= 6.0.0, < 6.0.3 6.0.3 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.Mono.osx-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.osx-x64 >= 3.0.0, < 3.1.23 3.1.23 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.osx-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.win-arm >= 3.0.0, < 3.1.23 3.1.23 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.win-arm >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.win-arm64 >= 3.0.0, < 3.1.23 3.1.23 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.win-arm64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.win-x64 >= 3.0.0, < 3.1.23 3.1.23 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.win-x64 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.win-x86 >= 3.0.0, < 3.1.23 3.1.23 GHSA-5v8v-66v8-mwm7
NuGet Microsoft.NETCore.App.Runtime.win-x86 >= 5.0.0, < 5.0.15 5.0.15 GHSA-5v8v-66v8-mwm7
PyPI brotli < 1.0.8 1.0.8 PYSEC-2020-29

Advisories 1

References