Repolode
Submit
trailofbits

trailofbits/brotli-checker

A Claude Code and Codex skill that scans projects and binaries for Brotli decoder copies affected by CVE-2026-111497 and guides updates.

View on GitHub
Stars
68
Forks
4
Open issues
2
Last commit
yesterday

What is it?

Brotli Checker finds copies of the Brotli decoder that may need an update for CVE-2026-111497. It is installed as a Claude Code or Codex skill, and the assistant then scans source code, dependencies, app packages, and unpacked container filesystems. The scanner checks source fingerprints and supported ELF binary code, and it can recognize decoder tables in stripped or LTO-built binaries.

For each copy found, the assistant investigates whether the running app actually uses it and explains what to update or review. The tool reads files without executing application code or making network probes. Trailmark can be used to map calls to the decoder and fetch APIs in source review.

A standalone Python scanner (standard library only, Python 3.12 to 3.15) can also be run directly, with optional JSON output for per-copy evidence and coverage gaps. Rules are based on an advisory snapshot dated 2026-10-23, so current vendor guidance should be checked for updates and backports.

Key features

  • 01Scans source code, dependencies, app packages, and container filesystems for Brotli decoder copies.
  • 02Checks source fingerprints and supported ELF binary code across many CPU architectures.
  • 03Recognizes decoder tables in stripped or LTO-built binaries.
  • 04Reads files without executing application code or sending network probes.
  • 05Outputs per-copy evidence and coverage gaps in JSON.

Use cases

  • Checking a project's dependencies and build output for vulnerable Brotli decoder copies.
  • Auditing container images or unpacked application packages before release.
  • Letting an assistant in Claude Code or Codex investigate and explain required updates.

Quick start

  1. 1

    Ask Claude Code or Codex to install the brotli-checker skill from the README link

  2. 2

    Clone the repository

    git clone https://github.com/trailofbits/brotli-checker.git
  3. 3

    Run the scanner on your application folder

    python3 skills/brotli-checker/scripts/brotli_inventory.py /path/to/application

Things to know

  • Requires Python 3.12 to 3.15, and uv for Trailmark source discovery.
  • Binary checks cover only the listed ELF architectures, and coverage depends on compiler and build flags.
  • Rules use an advisory snapshot dated 2026-10-23, so check current vendor guidance for updates.

In collections

Claude Code tools, skills & pluginsAI coding assistants & agentsSecurity scanners, audits & threat intel tools

Topics

#security#brotli#vulnerability-scanning#cve#binary-analysis#claude-code#codex

FAQ

What is brotli-checker?
A Claude Code and Codex skill that scans projects and binaries for Brotli decoder copies affected by CVE-2026-111497 and guides updates. Brotli Checker finds copies of the Brotli decoder that may need an update for CVE-2026-111497. It is installed as a Claude Code or Codex skill, and the assistant then scans source code, dependencies, app packages, and unpacked container filesystems. The scanner checks source fingerprints and supported ELF binary code, and it can recognize decoder tables in stripped or LTO-built binaries.
Is brotli-checker free to use? What license does it have?
brotli-checker is open source under the MIT license. Check the license terms before using it in commercial products.
Is brotli-checker still maintained?
Actively maintained. The last commit to brotli-checker was on Nov 6, 2026.
What can I use brotli-checker for?
Checking a project's dependencies and build output for vulnerable Brotli decoder copies. Auditing container images or unpacked application packages before release. Letting an assistant in Claude Code or Codex investigate and explain required updates.
How do I install brotli-checker?
Ask Claude Code or Codex to install the brotli-checker skill from the README link Clone the repository: git clone https://github.com/trailofbits/brotli-checker.git Run the scanner on your application folder: python3 skills/brotli-checker/scripts/brotli_inventory.py /path/to/application
Where can I get brotli-checker?
The source code and installation instructions are on GitHub: https://github.com/trailofbits/brotli-checker

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects