Cyber ·
Correction to a reference link for Brotli CVE-2026-111497 on oss-sec
On October 25, 2026, Alan Coopersmith posted a correction on the oss-sec feed for the Brotli CVE-2026-111497 thread. He says the second link in the original message was wrong because of a copy-and-paste error and gives the corrected target, a commit in the Brotli repository.
This Radar item is an editorial correction, not a full technical advisory. According to the text received, the original message about Brotli CVE-2026-111497 contained an incorrect second address. Alan Coopersmith published the correction on October 25, 2026, on the oss-sec mailing list feed, and stated that the correct address points to a commit in the Brotli repository maintained by Google. The text does not describe the defect, its impact, the affected versions or the code change, so none of those details are inferred here.
To consult the original, search the public oss-sec archive for the 2026 fourth-quarter messages for the Brotli CVE-2026-111497 thread and Alan Coopersmith's correction. To verify the cited commit, open the official Brotli repository and check that the hash matches the one in the correction. Before treating any CVE as resolved, also consult the official CVE database and the project's own advisory.