{"generated_at":"2026-10-24T13:30:51.528Z","count":1,"incidents":[{"id":"io-compress-brotli-out-of-bounds-write-cve-2026-115936","url":"https://pwned.coffee/i/io-compress-brotli-out-of-bounds-write-cve-2026-115936","title":"IO::Compress::Brotli Out-of-Bounds Write","summary":"IO::Compress::Brotli versions from 0.004001 before 0.023 for Perl bundle a brotli library with an out-of-bounds write in the decoder.","severity":"unknown","brew":{"name":"House blend","temp":"?"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"live","exploited":false,"exploitation":"none_known","exploitation_label":"No known exploitation","public_poc":false,"receipt":[{"kind":"unverified","quote":"CVE-2026-115936 is not on CVE.org or NVD yet; the vendor names it.","url":"https://seclists.org/oss-sec/2026/q4/367"}],"kev_due":null,"do":"Upgrade IO::Compress::Brotli to version 0.023 or later.","affected":"IO::Compress::Brotli","fixed_versions":["0.023"],"fix_lines":[{"product":"IO::Compress::Brotli","fixed":"0.023","source":"news"}],"downstream":[],"fix_note":null,"cvss":null,"severity_source":null,"spreading_until":null,"still_cooking":[],"published":null,"checked_at":"2026-10-24T13:17:23.100Z","unverified_ids":["CVE-2026-115936"],"ids":["CVE-2026-115936"],"aliases":[],"stack":["perl"],"first_seen":"2026-10-23T22:29:11.000Z","updated_at":"2026-10-23T22:29:11.000Z"}]}