▲ 99 ▼ Broccoli2Shell: the Brotli decoder bug (CVE-2026-111497) - Affecting Node.js, Python, C library (broccoli2shell.com) submitted 2 weeks ago by SirHaxalot@nord.pub to c/technology@lemmy.world 12 comments fedilink hide all child comments CVE-2026-111497 (Broccoli2Shell, aka Node2Shell): an out-of-bounds write in Google's Brotli decoder affecting Node.js, Python Brotli/brotlicffi and anything built on the C decoder. Affected versions, how to check, and how to fix it.
[–] UltraBlack@lemmy.world 27 points 2 weeks ago (1 child) Craziest 7 days permalink fedilink source hideshow 1 child comment replies: [–] lnxtx@sopuli.xyz 19 points 2 weeks ago yet. permalink fedilink source parent