Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more

broccoli2shell.com

Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more

broccoli2shell.com

RSS BotBM to Hacker NewsEnglish · 6 days ago

Broccoli2Shell: the Brotli decoder bug (CVE-2026-111497)

broccoli2shell.com

An out-of-bounds write in Google's Brotli decoder reaches Node.js, Python and more. Affected versions, checks and fixes.

Comments

You must log in or register to comment.

Chat

Hacker News

hackernews

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !hackernews@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

NOTICE: The bot occasionally has downtime, sorry about that. I’m working on adding better monitoring and error recovery so I can get notified faster.

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

486 users / day
1.83K users / week
3.88K users / month
8.77K users / 6 months
2 local subscribers
5.66K subscribers
64K Posts
34.9K Comments
Modlog