CVE-2026-111497 (Broccoli2Shell, aka Node2Shell): an out-of-bounds write in Google's Brotli decoder affecting Node.js, Python Brotli/brotlicffi and anything built on the C decoder. Affected versions, how to check, and how to fix it.

you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 1 week ago

Sure, but good reminder anyway.

  • source
  • parent