Brotli Decoder Vulnerability
patchtheplanet.org
1 thread
Dropping this post on a Friday evening is great timing
It's not from tonight.
## 2 days ago:
Node.js Brotli RCE (CVE-2026-111497) (23 points) https://news.ycombinator.com/item?id=50189292
Node.js security advisory: Brotli decoder RCE (CVE-2026-111497) (17 points, 3 comments) https://news.ycombinator.com/item?id=50192733
## 1 day ago:
Node2Shell: Node.js Brotli vulnerability allows remote code execution (14 points) https://news.ycombinator.com/item?id=50203180
Node2Shell: From Brotli Data to Remote Code Execution (4 points) https://news.ycombinator.com/item?id=50204501
## Today's dupes:
Brotli vulnerability affects curl and Git (22 points, 8 comments) https://news.ycombinator.com/item?id=50207180
<this>