Threats tagged 'brew-fonttools-cve-2025-6176'

Scrapy versions up to 2.13.3 contain a denial of service (DoS) vulnerability due to improper handling of brotli decompression. The existing protection against decompression bombs does not cover the brotli compression variant, allowing crafted data to cause excessive memory consumption and crash clients with less than 80GB of memory. This flaw is mitigated by security enhancements introduced in brotli version 1.2.0 and fixed in fonttools versions 4.45.0 and 4.60.1_2.