VertiGIS uses this page to provide specific information about the critical vulnerability CVE-2026-111497 affecting software that uses the Google Brotli decoder, disclosed on October 22, 2026, and its impact on VertiGIS Studio products.
This article will be updated as new information becomes available.
The following products do not use any Brotli decoders specifically and are not affected:
- VertiGIS Studio Item Manager
- VertiGIS Inline
The following products are under investigation:
- VertiGIS Studio Web
- VertiGIS Studio Workflow
- VertiGIS Studio Printing
- VertiGIS Studio Reporting
- VertiGIS Studio Mobile
- VertiGIS Studio Search
The following products are affected:
- VertiGIS Studio Access Control
- VertiGIS Studio Analytics
These products use node to deliver content. We have released a new version of each product with an updated version of node that does not contain the Brotli vulnerability.
Comments
0 comments
Please sign in to leave a comment.