Yhn first seen 2 d ago, last 2 d ago, peak #5

Brotli decoder flaw enables remote code execution across major runtimes

Original: Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more

A vulnerability dubbed Broccoli2Shell allows remote code execution through the Brotli decompression library, affecting Node.js, Python and other software that bundles affected decoder implementations. Any service accepting compressed input could potentially be exploited by attackers sending crafted Brotli streams. Developers are being urged to check whether their dependencies ship vulnerable decoder code and to apply patches as they become available.

Why now: A memory-safety bug in a widely bundled compression library used by major runtimes is a serious supply-chain security concern for developers.

BrotliNode.jsPythonBroccoli2Shell

Open on hn →

Rank over time, top of the chart is #1. 11 snapshots from 2 d ago to 2 d ago.

Evidence

• Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more · theanonymousone · 384

API: https://socialmediatrends-api.osmike.com/v1/trends/3632252