#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post

#Brotli

13 posts

Feed·
12 of 13 posts
HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow
🖼️
0Read More

HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow

Business - Latest - Google News·about 2 hours ago
#BIb7B24s
#world#news#cybersecuritynews#brotli#decoder

The HTTP2Shell Brotli flaw also impacts .NET, FFmpeg, ClickHouse, and Apache Arrow, so updating Node.js alone may leave other vulnerable applications exposed.

15s
CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python
📰
0Read More

CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python

DEV Community: infosec·Etairos.ai·about 20 hours ago
#qiIJuIbc
#devtoinfosec#devto#dev#brotli#code

TL;DR what: CVE-2026-111497 is an out-of-bounds write in Google's Brotli C decoder,...

15s
Black October Vulnerabilities: PHP2Shell & Node2Shell Fix
📰
0Read More

Black October Vulnerabilities: PHP2Shell & Node2Shell Fix

DEV Community: php·Naveed Ahmed·1 day ago
#hcESzBHr
#devto#dev#october#black#node

Triage Black October vulnerabilities in production. Fix PHP2Shell (CVE-2026-109618) and Node2Shell (CVE-2026-111497) Brotli RCE with container patch matrices.

15s
A Brotli Fix Sat Unreleased Since February. Node.js, Python and Envoy Are Patching One at a Time
🖼️
0Read More

A Brotli Fix Sat Unreleased Since February. Node.js, Python and Envoy Are Patching One at a Time

WebProNews·Ryan Gibson·2 days ago
#dTXWuutO
#webpronews#news#brotli#decoder#node

Google's Brotli decoder bug, CVE-2026-111497, was found by OpenAI's Codex Security team and fixed in the source code in February, but no release shipped the fix until Wednesday.…

15s
OpenAI's Codex Found a Node.js Brotli RCE. Imperva Ran Code on an Official Build
🖼️
0Read More

OpenAI's Codex Found a Node.js Brotli RCE. Imperva Ran Code on an Official Build

DEV Community: node·Gabriel Anhaia·2 days ago
#5FWSbnJX
#devtonodejs#devto#dev#node#code

CVE-2026-111497 lets crafted Brotli data corrupt memory via fetch() or Express 5 parsers. Fixed in Node 22.23.4, 24.22.1 and 26.12.1. Node 20 gets no fix.

15s
Serious security flaw in Google code affects Node.js and other applications
📰
0Read More

Serious security flaw in Google code affects Node.js and other applications

DEV Community: node·Hacks.gr·2 days ago
#jYv2YqsX
#devtonodejs#devto#dev#code#affected

CVE-2026-111497 is a memory-corruption flaw in Google’s Brotli decoder, affecting projects including Node.js, Bun, Envoy and Python Brotli packages. Imperv

15s
Node.js patched a code-execution Brotli bug October 21
📰
0Read More

Node.js patched a code-execution Brotli bug October 21

DEV Community: node·RC·3 days ago
#Bs4NYD2Z
#devtonodejs#devto#dev#brotli#node

Imperva's researchers ran attacker-supplied code on an official Node.js 24.22.0 image for Linux...

15s