CLEANSTART-2026-WY43892: buffer overflow vulnerability in the Brotli decoder (c/dec/decode
Published Nov 14, 2026
·Updated
CVE-2026-111497 affects multiple packages. A buffer overflow vulnerability in the Brotli decoder (c/dec/decode. See references for individual vulnerability details.
Affected Software
7 affected componentsFixes available
cleanstart/loki<3.4.6-r4
3.4.6-r4
cleanstart/loki<3.5.12-r9
3.5.12-r9
cleanstart/loki<3.7.9-r1
3.7.9-r1
cleanstart/jaeger<2.20.0-r0
2.20.0-r0
cleanstart/jaeger<2.21.0-r0
2.21.0-r0
cleanstart/jaeger<2.22.0-r1
2.22.0-r1
cleanstart/miniforge3<26.1.1.3-r4
26.1.1.3-r4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/lokito a version that resolves this vulnerability.Fixed in 3.4.6-r4 - Upgrade
Upgrade
cleanstart/lokito a version that resolves this vulnerability.Fixed in 3.5.12-r9 - Upgrade
Upgrade
cleanstart/lokito a version that resolves this vulnerability.Fixed in 3.7.9-r1 - Upgrade
Upgrade
cleanstart/jaegerto a version that resolves this vulnerability.Fixed in 2.20.0-r0 - Upgrade
Upgrade
cleanstart/jaegerto a version that resolves this vulnerability.Fixed in 2.21.0-r0 - Upgrade
Upgrade
cleanstart/jaegerto a version that resolves this vulnerability.Fixed in 2.22.0-r1 - Upgrade
Upgrade
cleanstart/miniforge3to a version that resolves this vulnerability.Fixed in 26.1.1.3-r4