← Back to feed

Broccoli2Shell: Brotli decoder RCE (CVE-2026-111497) in Node.js, Python and more

IT ยท 2026-10-24 13:36

Brotli decoder versions 1.0.3 through 1.2.0 contain an out-of-bounds write vulnerability affecting Node.js, Python, and other implementations, enabling crashes or remote code execution. Mitigation requires restarting processes and rebuilding images.

Source: broccoli2shell.com


Auto-generated summary for reference only. RSS