CVE-2020-8927: Compu brotli sys Integer Overflow Vulnerability

MODERATE
Advisory Identifier: GHSA-5v8v-66v8-mwm7
CVSS 6.5
CWE-120
Published
Advisory Summary

CVE-2020-8927 is a MODERATE (CVSS 6.5) integer overflow vulnerability (CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')) affecting Compu brotli sys libraries in the crates.io ecosystem. The issue involves integer overflow in the bundled brotli c library. Remediation is available by upgrading affected packages to version 1.0.9, 3.1.23, 1.0.8, 5.0.15, 6.0.3.

CVE-2020-8927 at a Glance

CVE Identifier CVE-2020-8927
GHSA Identifier GHSA-5v8v-66v8-mwm7
Severity MODERATE
CVSS v3.1 Base Score 6.5
CWE Classification CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected Product Compu brotli sys
Package Ecosystem crates.io
Published Date
Last Updated

Security Impact

CVSS: 6.5

The security impact metrics below are parsed directly from the CVSS v3.1 vector string (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).

Attack Vector Network (AV:N)
Attack Complexity Low (AC:L)
Privileges Required None (PR:N)
User Interaction None (UI:N)
Scope Unchanged (S:U)
Confidentiality None (C:N)
Integrity Low (I:L)
Availability Low (A:L)

How to Fix CVE-2020-8927

To remediate this vulnerability, upgrade all affected Compu brotli sys dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

compu-brotli-sys fixed: 1.0.9
Upgrade compu-brotli-sys to 1.0.9
Microsoft.NETCore.App.Runtime.linux-arm fixed: 3.1.23
Upgrade Microsoft.NETCore.App.Runtime.linux-arm to 3.1.23
Microsoft.NETCore.App.Runtime.linux-arm64 fixed: 3.1.23
Upgrade Microsoft.NETCore.App.Runtime.linux-arm64 to 3.1.23
Microsoft.NETCore.App.Runtime.linux-musl-arm64 fixed: 3.1.23
Upgrade Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 3.1.23
Microsoft.NETCore.App.Runtime.linux-x64 fixed: 3.1.23
Upgrade Microsoft.NETCore.App.Runtime.linux-x64 to 3.1.23
Microsoft.NETCore.App.Runtime.osx-x64 fixed: 3.1.23
Upgrade Microsoft.NETCore.App.Runtime.osx-x64 to 3.1.23
brotli fixed: 1.0.8
pip install brotli>=1.0.8
Microsoft.NETCore.App.Runtime.win-arm fixed: 3.1.23
Upgrade Microsoft.NETCore.App.Runtime.win-arm to 3.1.23
Microsoft.NETCore.App.Runtime.win-arm64 fixed: 3.1.23
Upgrade Microsoft.NETCore.App.Runtime.win-arm64 to 3.1.23
Microsoft.NETCore.App.Runtime.win-x64 fixed: 3.1.23
Upgrade Microsoft.NETCore.App.Runtime.win-x64 to 3.1.23
Microsoft.NETCore.App.Runtime.win-x86 fixed: 3.1.23
Upgrade Microsoft.NETCore.App.Runtime.win-x86 to 3.1.23
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-arm fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.linux-arm to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-arm64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.linux-arm64 to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.linux-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.Mono.osx-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.Mono.osx-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.browser-wasm fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.browser-wasm to 5.0.15
Microsoft.NETCore.App.Runtime.linux-arm fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.linux-arm to 5.0.15
Microsoft.NETCore.App.Runtime.linux-arm64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.linux-arm64 to 5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-arm fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.linux-musl-arm to 5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-arm64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.linux-musl-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.linux-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.linux-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.osx-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.osx-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.win-arm fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.win-arm to 5.0.15
Microsoft.NETCore.App.Runtime.win-arm64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.win-arm64 to 5.0.15
Microsoft.NETCore.App.Runtime.win-x64 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.win-x64 to 5.0.15
Microsoft.NETCore.App.Runtime.win-x86 fixed: 5.0.15
Upgrade Microsoft.NETCore.App.Runtime.win-x86 to 5.0.15
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm to 6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.browser-wasm to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.linux-arm to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.linux-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.linux-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.osx-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.osx-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.osx-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.osx-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.win-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.win-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.Mono.win-x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.Mono.win-x86 to 6.0.3
Microsoft.NETCore.App.Runtime.linux-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.linux-arm to 6.0.3
Microsoft.NETCore.App.Runtime.linux-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.linux-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.linux-musl-arm to 6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.linux-musl-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.linux-musl-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.linux-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.linux-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.osx-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.osx-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.osx-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.osx-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.win-arm fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.win-arm to 6.0.3
Microsoft.NETCore.App.Runtime.win-arm64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.win-arm64 to 6.0.3
Microsoft.NETCore.App.Runtime.win-x64 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.win-x64 to 6.0.3
Microsoft.NETCore.App.Runtime.win-x86 fixed: 6.0.3
Upgrade Microsoft.NETCore.App.Runtime.win-x86 to 6.0.3
Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release:

inspect dependencies for compu-brotli-sys

How to Check if You Are Affected

To determine whether your application is affected by CVE-2020-8927, inspect your project dependencies for Compu brotli sys:

inspect dependencies for compu-brotli-sys

Analyze the terminal output to locate any version of Compu brotli sys in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than 1.0.9), your application is affected.

Note: Verify declared build manifests and deployed runtime container environments.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), where the product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. In Compu brotli sys, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.

CVE-2020-8927 Affected Compu brotli sys Versions

149 component(s)
Fixed Versions:
1.0.93.1.231.0.85.0.156.0.3
Product / Package Ecosystem Affected Versions Fixed Version
compu-brotli-sys
crates.io
< 1.0.9
1.0.9
Microsoft.NETCore.App.Runtime.linux-arm
NuGet
≥ 3.0.0
< 3.1.23
3.1.23
Microsoft.NETCore.App.Runtime.linux-arm64
NuGet
≥ 3.0.0
< 3.1.23
3.1.23
Microsoft.NETCore.App.Runtime.linux-musl-arm64
NuGet
≥ 3.0.0
< 3.1.23
3.1.23
Microsoft.NETCore.App.Runtime.linux-x64
NuGet
≥ 3.0.0
< 3.1.23
3.1.23
Microsoft.NETCore.App.Runtime.osx-x64
NuGet
≥ 3.0.0
< 3.1.23
3.1.23
brotli
PyPI
< 1.0.8
1.0.8
Microsoft.NETCore.App.Runtime.win-arm
NuGet
≥ 3.0.0
< 3.1.23
3.1.23
Microsoft.NETCore.App.Runtime.win-arm64
NuGet
≥ 3.0.0
< 3.1.23
3.1.23
Microsoft.NETCore.App.Runtime.win-x64
NuGet
≥ 3.0.0
< 3.1.23
3.1.23
Microsoft.NETCore.App.Runtime.win-x86
NuGet
≥ 3.0.0
< 3.1.23
3.1.23
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-arm
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-arm64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.linux-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.Mono.osx-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.browser-wasm
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.linux-arm
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.linux-arm64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-arm
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-arm64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.linux-musl-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.linux-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.osx-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.win-arm
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.win-arm64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.win-x64
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.win-x86
NuGet
≥ 5.0.0
< 5.0.15
5.0.15
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.linux-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.osx-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.osx-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.win-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.Mono.win-x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.linux-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.linux-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.linux-musl-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.linux-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.osx-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.osx-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.win-arm
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.win-arm64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.win-x64
NuGet
≥ 6.0.0
< 6.0.3
6.0.3
Microsoft.NETCore.App.Runtime.win-x86
NuGet
≥ 6.0.0
< 6.0.3
6.0.3

References

NVD — CVE-2020-8927 NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-8927
Compu brotli sys Source Repository REPOSITORY
https://github.com/bitemyapp/brotli2-rs/issues/45
Compu brotli sys Source Repository REPOSITORY
https://github.com/github/advisory-database/issues/785
Security Fix Commit FIX COMMIT
https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6
Compu brotli sys Security Information SECURITY
https://www.debian.org/security/2020/dsa-4801
usn.ubuntu.com/4568-1 WEB
https://usn.ubuntu.com/4568-1
rustsec.org/advisories/rustsec-... WEB
https://rustsec.org/advisories/RUSTSEC-2021-0132.html
rustsec.org/advisories/rustsec-... WEB
https://rustsec.org/advisories/RUSTSEC-2021-0131.html
lists.fedoraproject.org/archives/list/packa... WEB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG
lists.fedoraproject.org/archives/list/packa... WEB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK
lists.fedoraproject.org/archives/list/packa... WEB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I
lists.fedoraproject.org/archives/list/packa... WEB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27
lists.fedoraproject.org/archives/list/packa... WEB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP
lists.fedoraproject.org/archives/list/packa... WEB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6
lists.fedoraproject.org/archives/list/packa... WEB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6
lists.fedoraproject.org/archives/list/packa... WEB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF
lists.fedoraproject.org/archives/list/packa... WEB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH
lists.debian.org/debian-lts-announce... WEB
https://lists.debian.org/debian-lts-announce/2020/12/msg00003.html
Compu brotli sys Source Repository REPOSITORY
https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2020-29.yaml
Compu brotli sys Release RELEASE
https://github.com/google/brotli/releases/tag/v1.0.9
Compu brotli sys Release RELEASE
https://github.com/google/brotli/releases/tag/v1.0.8
Compu brotli sys Source Repository REPOSITORY
https://github.com/bitemyapp/brotli2-rs
Compu brotli sys Security Information SECURITY
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00108.html

Frequently Asked Questions

What is CVE-2020-8927?
CVE-2020-8927 is a security vulnerability in Compu brotli sys involving Integer overflow in the bundled Brotli C library under CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow').
Which Compu brotli sys versions are affected?
Affected versions include releases prior to 1.0.9, 3.1.23, 1.0.8, 5.0.15, 6.0.3 across affected packages: compu-brotli-sys, Microsoft.NETCore.App.Runtime.linux-arm, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.osx-x64, brotli, Microsoft.NETCore.App.Runtime.win-arm, Microsoft.NETCore.App.Runtime.win-arm64, Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-x86, Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64, Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64, Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64, Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64, Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64, Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64, Microsoft.NETCore.App.Runtime.Mono.linux-arm, Microsoft.NETCore.App.Runtime.Mono.linux-arm64, Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64, Microsoft.NETCore.App.Runtime.Mono.linux-x64, Microsoft.NETCore.App.Runtime.Mono.osx-x64, Microsoft.NETCore.App.Runtime.browser-wasm, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm, Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64, Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64, Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86, Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64, Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm, Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.android-arm, Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.android-arm64, Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.android-x64, Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.android-x86, Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.browser-wasm, Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.ios-arm, Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.ios-arm64, Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64, Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64, Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86, Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64, Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64, Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.osx-arm64, Microsoft.NETCore.App.Runtime.Mono.tvos-arm64, Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64, Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64, Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64, Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64, Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86, Microsoft.NETCore.App.Runtime.Mono.win-x64, Microsoft.NETCore.App.Runtime.Mono.win-x86, Microsoft.NETCore.App.Runtime.osx-arm64.
What version fixes CVE-2020-8927?
Upgrading to 1.0.9, 3.1.23, 1.0.8, 5.0.15, 6.0.3 (or the latest patched release for your respective branch) resolves the vulnerability.
Is compu-brotli-sys affected?
Yes, compu-brotli-sys is affected in releases prior to 1.0.9. Upgrade your dependency to 1.0.9 or later.
Is Microsoft.NETCore.App.Runtime.linux-arm affected?
Yes, Microsoft.NETCore.App.Runtime.linux-arm is affected in releases prior to 3.1.23, 5.0.15, 6.0.3. Upgrade your dependency to 3.1.23, 5.0.15, 6.0.3 or later.
What is the CVSS score of CVE-2020-8927?
CVE-2020-8927 has a CVSS v3.1 base score of 6.5 (MODERATE) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L.
What CWE is associated with CVE-2020-8927?
CVE-2020-8927 is classified under CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.).
How can I check crates.io dependencies for CVE-2020-8927?
Run the dependency tree command: 'inspect dependencies for compu-brotli-sys'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-5v8v-66v8-mwm7",
  "modified" : "2024-09-16T13:48:46Z",
  "published" : "2022-05-24T17:28:21Z",
  "aliases" : [ "CVE-2020-8927" ],
  "summary" : "Integer overflow in the bundled Brotli C library",
  "details" : "A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
  }, {
    "type" : "CVSS_V4",
    "score" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N"
  } ],
  "affected" : [ {
    "package" : {
      "ecosystem" : "crates.io",
      "name" : "compu-brotli-sys"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "fixed" : "1.0.9"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.23"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.23"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-musl-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.23"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.23"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.23"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.23"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.23"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.23"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.23"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.linux-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.browser-wasm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-musl-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-musl-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-musl-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.15"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.browser-wasm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.ios-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.ios-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.linux-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.osx-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.win-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.Mono.win-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-musl-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-musl-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-musl-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.osx-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.NETCore.App.Runtime.win-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "PyPI",
      "name" : "brotli"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "fixed" : "1.0.8"
      } ]
    } ]
  } ],
  "references" : [ {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/bitemyapp/brotli2-rs/issues/45"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/github/advisory-database/issues/785"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6"
  }, {
    "type" : "WEB",
    "url" : "https://www.debian.org/security/2020/dsa-4801"
  }, {
    "type" : "WEB",
    "url" : "https://usn.ubuntu.com/4568-1"
  }, {
    "type" : "WEB",
    "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0132.html"
  }, {
    "type" : "WEB",
    "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0131.html"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH"
  }, {
    "type" : "WEB",
    "url" : "https://lists.debian.org/debian-lts-announce/2020/12/msg00003.html"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2020-29.yaml"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/google/brotli/releases/tag/v1.0.9"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/google/brotli/releases/tag/v1.0.8"
  }, {
    "type" : "PACKAGE",
    "url" : "https://github.com/bitemyapp/brotli2-rs"
  }, {
    "type" : "WEB",
    "url" : "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00108.html"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-120" ],
    "severity" : "MODERATE",
    "github_reviewed" : true,
    "github_reviewed_at" : "2022-06-16T23:47:42Z",
    "nvd_published_at" : "2020-09-15T10:15:00Z"
  }
}