Search: CVE-2025-64509

CVE-2025-64509 is a high-severity vulnerability in Bugsink, a self-hosted error tracking tool. Versions prior to 2.0.6 are affected by an issue where processing a specially crafted Brotli-compressed envelope can cause excessive CPU consumption during decompression, resulting in denial of service. The attack requires knowledge of the DSN, which is often exposed in common setups such as JavaScript and mobile applications. This vulnerability is distinct but related to another Brotli decompression issue in Bugsink (CVE-2025-64508). The issue is fixed in version 2.0.6.