Project

General

Profile

Actions
Copy link

Security #8695

closed
OT PA

http1: multiple brotli bombs on a flow are slow (8.0.x backport)

Security #8695: http1: multiple brotli bombs on a flow are slow (8.0.x backport)

Added by OISF Ticketbot about 2 months ago. Updated 28 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.6
Affected Versions:
Label:
CVE:
2026-63452
Git IDs:

e369bf29ee5bbd0cdf6a98dc4a3357ba43c86a88

Severity:
HIGH
Disclosure Date:
09/23/2026
GHSA:
GHSA-j9cx-w9xm-5x84

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #1

  • Target version changed from 8.0.7 to 8.0.6

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #2

  • GHSA set to GHSA-j9cx-w9xm-5x84

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #3

  • Disclosure Date set to 09/23/2026

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #4

  • Severity set to HIGH

Apply severity from parent ticket: HIGH.

SB Updated by Shivani Bhardwaj about 1 month ago Actions
Copy link
 #5

  • Status changed from Assigned to Resolved

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #6

  • Git IDs updated (diff)

VJ Updated by Victor Julien about 1 month ago Actions
Copy link
 #7

  • Status changed from Resolved to Closed

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #8

  • CVE set to 2026-63452

JI Updated by Jason Ish 28 days ago Actions
Copy link
 #9

  • Private changed from Yes to No
Actions
Copy link

Also available in: PDF Atom