All vulnerabilities

Servers and applications

GHSA-3wvj-j6qm-62mr

Out-of-Bounds Write in Brotli Decompressor

Severity
Critical 9.2
Published
23 Oct 2026
Last changed
23 Oct 2026
Added to UpHeron
3 Nov 2026
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
EnvoyServers and applications · github:envoyproxy/envoy
  • Version 1.36.11
  • Version 1.37.7
  • Version 1.38.5
  • Version 1.39.2

References