GgoogleDE first seen 2 d ago, last 6 h ago, peak #3

Critical Brotli decoder vulnerability hits Node.js, Bun and Python

Original: brotli

Security researchers have disclosed a critical flaw in the Brotli compression decoder, a library built into countless applications. The bug, dubbed Broccoli2shell by Wiz, enables remote code execution and is not limited to Node.js — it also affects Bun, Python and other widely used software. German outlet Golem.de warns that attacker code execution is possible across numerous applications. Developers are urged to patch dependent runtimes and packages.

Why now: A newly disclosed critical vulnerability in a ubiquitous compression library has prompted urgent patching and security warnings across the developer community.

BrotliNode.jsBunPythonWiz

Open on google →

Evidence

• Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability · wiz.io
• Schadcode-Attacken möglich: Lücke in Brotli-Decoder gefährdet zahllose Anwendungen · Golem.de
• Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software · The Hacker News

Elsewhere

• GgoogleJP #9 · 6 h ago
• GgoogleGB #8 · 1 d ago
• GgoogleRU #9 · 2 d ago

API: https://socialmediatrends-api.osmike.com/v1/trends/3742610