Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, Microsoft's .NET, the Python Brotli and brotlicffi packages, and Envoy proxies set up to…
Sign in with GitHub to write an analysis. It's reviewed before publishing.
🐝 Community analysis
No one has analysed this yet. Be the first. Explain how it happened, who's affected and how defenders should respond.
Headline and excerpt © The Hacker News. CVE Hive links to the original report and doesn't verify third-party reporting. Community analyses are reviewed by the CVE Hive team before publishing.