Threats tagged 'brew-flexget-cve-2025-6176'

Scrapy versions up to 2.13.3, used in Flexget versions >=3.17.7 and <3.18.21_1, are vulnerable to a denial of service (DoS) attack due to a flaw in the brotli decompression implementation. The existing protection against decompression bombs does not mitigate the brotli variant, allowing remote servers to cause excessive memory consumption and crash clients with less than 80GB of available memory. This vulnerability is fixed in Flexget version 3.18.21_1.