Brotli Decoder Vulnerability

2 comments

• 1729 43 minutes ago

  Dropping this post on a Friday evening is great timing

  [-]
  gnabgib 40 minutes ago

  It's not from tonight.

  ## 2 days ago:

  Node.js Brotli RCE (CVE-2026-111497) (23 points) https://news.ycombinator.com/item?id=50189292

  Node.js security advisory: Brotli decoder RCE (CVE-2026-111497) (17 points, 3 comments) https://news.ycombinator.com/item?id=50192733

  ## 1 day ago:

  Node2Shell: Node.js Brotli vulnerability allows remote code execution (14 points) https://news.ycombinator.com/item?id=50203180

  Node2Shell: From Brotli Data to Remote Code Execution (4 points) https://news.ycombinator.com/item?id=50204501

  ## Today's dupes:

  Brotli vulnerability affects curl and Git (22 points, 8 comments) https://news.ycombinator.com/item?id=50207180

  <this>