{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:36.263Z","products":["tianocore"],"actNowTotal":1,"results":[{"query":"tianocore","matched":1,"actNow":1,"events":[{"id":"kev-2026-10-27-google-brotli","url":"https://securitythreatpulse.com/events/kev-2026-10-27-google-brotli","title":"Google Brotli: attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 19 days old, so many systems are likely still unpatched. The severity score is critical (9.2). The exploit prediction score is 83%.","tier":"now","rankScore":5,"rankWhy":["Exploitation is confirmed by an authoritative source.","The confirmation is 15 days old.","12 products are affected."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-111497"],"vendor":"Google","product":"Brotli","affectedProducts":[{"kind":"direct","slug":"google/brotli","vendor":"Google","product":"Brotli","evidence":["kev","cpe"],"vendorKey":"google","productKey":"brotli"},{"kind":"direct","slug":"nodejs/nodejs","vendor":"Nodejs","product":"Nodejs","evidence":["cpe"],"vendorKey":"nodejs","productKey":"nodejs"},{"kind":"direct","slug":"pythonhyper/brotlicffi","vendor":"Python-hyper","product":"Brotlicffi","evidence":["cpe"],"vendorKey":"pythonhyper","productKey":"brotlicffi"},{"kind":"direct","slug":"microsoft/net","vendor":"Microsoft","product":".NET","evidence":["cpe"],"vendorKey":"microsoft","productKey":"net"},{"kind":"direct","slug":"debian/debianlinux","vendor":"Debian","product":"Debian Linux","evidence":["cpe"],"vendorKey":"debian","productKey":"debianlinux"},{"kind":"direct","slug":"istio/istio","vendor":"Istio","product":"Istio","evidence":["cpe"],"vendorKey":"istio","productKey":"istio"},{"kind":"direct","slug":"anthropic/bun","vendor":"Anthropic","product":"Bun","evidence":["cpe"],"vendorKey":"anthropic","productKey":"bun"},{"kind":"direct","slug":"envoyproxy/envoy","vendor":"Envoyproxy","product":"Envoy","evidence":["cpe"],"vendorKey":"envoyproxy","productKey":"envoy"},{"kind":"direct","slug":"tianocore/edk2","vendor":"Tianocore","product":"Edk2","evidence":["cpe"],"vendorKey":"tianocore","productKey":"edk2"},{"kind":"direct","slug":"google/woff2","vendor":"Google","product":"Woff2","evidence":["cpe"],"vendorKey":"google","productKey":"woff2"},{"kind":"direct","slug":"duckdb/duckdb","vendor":"Duckdb","product":"Duckdb","evidence":["cpe"],"vendorKey":"duckdb","productKey":"duckdb"},{"kind":"direct","slug":"clickhouse/clickhouse","vendor":"Clickhouse","product":"Clickhouse","evidence":["cpe"],"vendorKey":"clickhouse","productKey":"clickhouse"}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.","cvss":9.2,"epss":0.82641,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-10-27","kevDueDate":"2026-11-10","firstSeenAt":"2026-10-27T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-11T07:30:04.059Z"}]}]}