CVE-2025-6176
HighAdvisory
Published 31 Oct 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.005
- 41st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 255
- of 17,781 indexed, latest versions
- Container images
- 287
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation
Carried by container images the latest versions of 255 of 17,781 indexed charts deploy, on 287 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| brotlirpm | 1.0.6-1.el8, 1.0.6-2.el8, 1.0.6-3.el8, 1.0.9-6.el9+2 more | 0:1.0.6-4.el8_10, 0:1.0.9-9.el9_7, 0:1.1.0-7.el10_1 | 238 |
| brotlipypi | 1.0.9, 1.1.0 | 1.2.0 | 49 |
- OSV records
- GHSA-2qfp-q593-8484RHSA-2026:0845RHSA-2026:2042RHSA-2026:2389RLSA-2026:2042
- Also known as
- PYSEC-2026-1906, PYSEC-2026-2401, RHSA-2026:2227, RHSA-2026:2228, RHSA-2026:2229, RHSA-2026:2399, RHSA-2026:2400, RHSA-2026:2401, RHSA-2026:2455
Charts affected
255 by stars
Container images carrying it
287 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apicurio/ | 302d202ed149 | brotli | 0:1.0.6-4.el8_10 | 1 |
| apicurio/ | 349c845270c2 | brotli | 0:1.0.6-4.el8_10 | 1 |
| apicurio/ | 27a91978a388 | brotli | 0:1.0.6-4.el8_10 | 1 |
| assistiot/ | 0df4b4fa899a | brotli | 0:1.0.6-4.el8_10 | 1 |
| baserow/ | e0b3c8130b91 | brotli | 1.2.0 | 1 |
| baserow/ | df0c42eb67e8 | brotli | 1.2.0 | 1 |
| beopenit/ | b4d9f9bee224 | brotli | 0:1.0.6-4.el8_10 | 1 |
| bmeares/ | 8e9c5bacaa82 | brotli | 1.2.0 | 1 |
| bsgrigorov/ | 45ab095f09c8 | brotli | 0:1.0.6-4.el8_10 | 1 |
| cleveritcz/ | c75c1636e0b7 | brotli | 0:1.0.9-9.el9_7 | 1 |
| cockroachdb/ | 1116820f4134 | brotli | 0:1.0.6-4.el8_10 | 1 |
| cockroachdb/ | 983312754620 | brotli | 0:1.0.6-4.el8_10 | 1 |
| coderenvs/ | 1deffc4670e6 | brotli | 0:1.0.6-4.el8_10 | 1 |
| coderenvs/ | 76fd37fe6830 | brotli | 0:1.0.6-4.el8_10 | 1 |
| codetogether/ | 4348c8a38752 | brotli | 0:1.0.9-9.el9_7 | 1 |
| confluentinc/ | f2975d507a2a | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | 8f1544df1f48 | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | 3bf359d5e340 | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | 83dbca3efd2a | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | adc392d28a1e | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | c0224a1adf7a | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | dc9b972db002 | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | 4bc70a83ca6f | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | b0b7aa26254a | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | 8ec46c27982f | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | ee403d5b9090 | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | b651d4b6185a | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | 0bec03c1f3ce | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | 5ca5f3269814 | brotli | 0:1.0.6-4.el8_10 | 1 |
| confluentinc/ | 78c190f4472c | brotli | 0:1.0.6-4.el8_10 | 1 |
| craftypath/ | 402a0024c732 | brotli | 0:1.0.6-4.el8_10 | 1 |
| ctron/ | 8fdea8f76499 | brotli | 0:1.0.6-4.el8_10 | 1 |
| datadog/ | 513a4377aed5 | brotli | 0:1.0.6-4.el8_10 | 1 |
| datawire/ | f95ae710d75c | brotli | 0:1.0.6-4.el8_10 | 1 |
| dellemc/ | 148ada9060a9 | brotli | 0:1.0.6-4.el8_10 | 1 |
| dellemc/ | 660cabd6d929 | brotli | 0:1.0.6-4.el8_10 | 1 |
| dpage/ | 18cd5711fc9a | brotli | 1.2.0 | 1 |
| dpage/ | 37946e4f3e7b | brotli | 1.2.0 | 1 |
| dpage/ | 52cb72a9e3da | brotli | 1.2.0 | 1 |
| dpage/ | 561c1f8f99f2 | brotli | 1.2.0 | 1 |
| evk02/ | ef6ff257ef35 | brotli | 1.2.0 | 1 |
| fiware/ | 92a3c5cf43c0 | brotli | 0:1.0.6-4.el8_10 | 1 |
| fiware/ | efc6793388cc | brotli | 0:1.0.6-4.el8_10 | 1 |
| fiware/ | 3c490a746f65 | brotli | 0:1.0.6-4.el8_10 | 1 |
| foundationdb/ | 7d7b6985291e | brotli | 0:1.0.9-9.el9_7 | 1 |
| galaxy/ | e5c265fe9fcd | brotli | 1.2.0 | 1 |
| grafana/ | 09d8c3ce4f3a | brotli | 0:1.0.9-9.el9_7 | 1 |
| gurolakman/ | ed8fd2062548 | brotli | 0:1.0.6-4.el8_10 | 1 |
| gurolakman/ | 9abb3882bcbd | brotli | 0:1.0.6-4.el8_10 | 1 |
| gurolakman/ | 6537e8ed8de8 | brotli | 0:1.0.6-4.el8_10 | 1 |