GHSA-rrx3-2x4g-mq2h
High · 7.5CVSS
7.5
EPSS
—
Published
Nov 13, 2025
CISA due date
—
The record
Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | bugsink | 0 | 2.0.6 |
Related vulnerabilities
- CVE-2025-64509 Bugsink is a self-hosted error tracking tool. Same vulnerability
- GHSA-vp6q-7m36-pq3w Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering Also affects bugsink
- CVE-2026-27614 Bugsink is a self-hosted error tracking tool. Also affects bugsink
- GHSA-fc2v-vcwj-269v Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input Also affects bugsink
- CVE-2025-64508 Bugsink is a self-hosted error tracking tool. Also affects bugsink
- CVE-2026-114731 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled… CWE-770
- CVE-2026-96377 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined… CWE-770
- CVE-2026-96365 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform… CWE-770