MikeTrendsTrends right now
AI: reposAPI

search

brotlicffi

Trends

  1. 1
    New Brotli decoder flaw CVE-2026-111497 rated 9.2●POV: you just finished patching PHP2Shell then node and python get one too broccoli2shell, CVE-2026-111497, CVSS 9.2, anMmastodonTechnologyCybersecurity23 d ago

    A new critical vulnerability, CVE-2026-111497 with a CVSS score of 9.2, is drawing attention after reports of an out-of-bounds write in Google's Brotli decoder affecting Node.js and Python Brotli implementations, dubbed 'broccoli2shell'. It follows the recent 'PHP2Shell' flaw, frustrating security teams who had just finished patching that issue. Fixed versions reportedly include Node 22.23.4, 24.22.1, 26.12.1, Python Brotli 1.2.1 and brotlicffi 1.2.1.0. The bug was reported via OpenAI's Codex security research.