|
|
Rank: Advanced Member
Groups: Member
Joined: 7/16/2015
Posts: 67
|
Hi Support Team,
I urgently need to know whether your browser is affected by the Brotli vulnerability CVE-2026-111497.
Could you provide any information on this?
Thanks in advance!
Best ragards!
|
|
Rank: Administration
Groups: Administration
Joined: 5/27/2007
Posts: 24,521
|
Hi,
Yes. EO.WebBrowser relies on Chromium which currently uses Brotli 1.2.0 and it is affected by this vulnerability. We are updating it to Brotli 1.2.1 that contains the fix for this issue. A new build with the fix should be out next week.
Thanks!
|
|
Rank: Advanced Member
Groups: Member
Joined: 7/16/2015
Posts: 67
|
Hi,
thanks for your quick reply! Which frameworks exactly are affected? Do you also use Node.js or Python, which are affected by the security vulnerability? Or just .NET and ASP.NET frameworks?
Best regards!
|
|
Rank: Administration
Groups: Administration
Joined: 5/27/2007
Posts: 24,521
|
No. It has nothing to do with Noje.js/Python or .NET. Our product is affected because EO.WebBrowser uses Google's Chromium and currently Chromium uses Brotli 1.2.0, which is one of the Brotli versions that are affected by this vulnerability. Node.js and Python are also affected due to their dependency on Brotli but that has nothing to do with EO.WebBrowser, nor does EO.WebBrowser use them.
Some .NET versions are also affected. But that is completely unrelated to our product either. Even though our product is for .NET, it does not use any of the .NET features that may be affected by this vulnerability. Microsoft has released emergency patches for affected .NET versions and that would need to be applied separately in case you have any other .NET code/application that maybe affected.
|
|
Rank: Advanced Member
Groups: Member
Joined: 7/16/2015
Posts: 67
|
Thanks a lot for the detailed explanation.
|
|