GgoogleJP first seen 4 d ago, last 11 h ago, peak #1
Microsoft emergency patch fixes Brotli flaw in .NET
Original: brotli
Microsoft has released out-of-band updates fixing four vulnerabilities in .NET, including a Brotli compression flaw and the 'HTTP2Shell' vulnerability affecting PowerShell, after a botched regular Patch Tuesday. Node.js has also shipped security updates across versions 22, 24 and 26, fixing ten vulnerabilities in total. Reports warn millions of sites could be at risk, drawing comparisons to a recent critical PHP vulnerability, prompting sysadmins to patch urgently.
Why now: A critical compression-related flaw in widely used software stacks has forced emergency updates, making admins rush to patch.
Microsoft.NETPowerShellNode.jsPHP
Evidence
- Microsoft、.NETの脆弱性「HTTP2Shell」に緊急対応 PowerShellなども更新 · マイナビニュース
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages · SecurityWeek
- マイクロソフト、.NETのBrotli脆弱性など4件を臨時更新で修正 定例更新の不備2件も · ビジネス+IT
- Node.jsがセキュリティアップデートで「22.23.4」「24.22.1」「26.12.1」配信、全体で10件の脆弱性を修正 · au Webポータル
- After PHP, it's Node.js' turn: critical vulnerability puts millions of sites at risk · dev.ua
Elsewhere
API: https://socialmediatrends-api.osmike.com/v1/trends/3452335