Brotli Decoder Vulnerability

2 comments

• 1729 13 hours ago ago

  Dropping this post on a Friday evening is great timing

  [-]
  • gnabgib 13 hours ago ago

    It's not from tonight.

    ## 2 days ago:

    Node.js Brotli RCE (CVE-2026-111497) (23 points) https://news.ycombinator.com/item?id=50189292

    Node.js security advisory: Brotli decoder RCE (CVE-2026-111497) (17 points, 3 comments) https://news.ycombinator.com/item?id=50192733

    ## 1 day ago:

    Node2Shell: Node.js Brotli vulnerability allows remote code execution (14 points) https://news.ycombinator.com/item?id=50203180

    Node2Shell: From Brotli Data to Remote Code Execution (4 points) https://news.ycombinator.com/item?id=50204501

    ## Today's dupes:

    Brotli vulnerability affects curl and Git (22 points, 8 comments) https://news.ycombinator.com/item?id=50207180

    <this>