Evolving Threat: http2shell is an RCE in node, Python, and more

3 comments

• adzm 9 minutes ago

  Interestingly the commit that fixes this in brotli dates back to February https://github.com/google/brotli/commit/0ed4268a4401abcb4472...

• profdevloper 19 minutes ago

  https://x.com/AikidoSecurity/status/2113759110625906950

• cowlevel an hour ago

  Likely mitigation: disable brotli (br) encoding