Threats affecting pkg:brew/gdbgui

A vulnerability in dnspython's dns.name.from_wire_parser() function can cause excessive CPU usage when processing maliciously crafted DNS messages. This can degrade or cause denial of service (DoS) in applications that handle untrusted DNS wire format messages using dnspython. The issue is fixed in dnspython version 2.9.0. No known workarounds exist.

A buffer overflow vulnerability exists in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0. This flaw allows a remote unauthenticated attacker to corrupt adjacent memory, potentially leading to sensitive data disclosure, denial of service, or arbitrary code execution via a crafted Brotli-compressed stream. Users should update affected Brotli libraries to versions 1.0.10, 1.1.1, or 1.2.1 to mitigate this issue.

A vulnerability in h11 up to version 0.14.0 allows malformed HTTP/1.1 chunked-encoding bodies to be accepted due to improper validation of trailing line terminators. This leniency can lead to HTTP request smuggling when combined with a buggy proxy that parses chunked bodies differently. The issue is fixed in h11 version 0.15.3.0. Exploitation requires both h11 and a proxy to have incompatible parsing bugs.