Brotli Decoder Vulnerability(patchtheplanet.org)

3 pointsby nthypes2 hours ago1 comment

17292 hours ago
Dropping this post on a Friday evening is great timing
- gnabgib2 hours ago
  It's not from tonight.
  ## 2 days ago:
  Node.js Brotli RCE (CVE-2026-111497) (23 points) https://news.ycombinator.com/item?id=50189292
  Node.js security advisory: Brotli decoder RCE (CVE-2026-111497) (17 points, 3 comments) https://news.ycombinator.com/item?id=50192733
  ## 1 day ago:
  Node2Shell: Node.js Brotli vulnerability allows remote code execution (14 points) https://news.ycombinator.com/item?id=50203180
  Node2Shell: From Brotli Data to Remote Code Execution (4 points) https://news.ycombinator.com/item?id=50204501
  ## Today's dupes:
  Brotli vulnerability affects curl and Git (22 points, 8 comments) https://news.ycombinator.com/item?id=50207180
  <this>