Broccoli2Shell: Brotli decoder RCE (CVE-2026-111497) in Node.js, Python and more

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 1 week ago

99 times out of 100 a well used open source program written in any language is going to be more secure than something vibe coded in rust. Sure you wont get memory bugs (probably, if you're just vibing it how do you know its not using unsafe rust?), but it is vastly more likely to just contain regular logic bugs.

  • source
  • parent