GgoogleUS first seen 1 d ago, last 1 d ago, peak #5
Brotli Decoder Vulnerability Hits Node.js, Bun and Python
Original: cve-2026-111497
Security researchers have disclosed a flaw in the widely used Brotli decompression library that enables remote code execution in Node.js, with Bun, Python and other widely deployed software also affected. The vulnerability stems from memory-safety issues in the Brotli decoder, meaning any application accepting compressed data from untrusted sources could be at risk. Developers are being urged to check whether their dependencies bundle vulnerable versions and to apply patches as they become available across affected projects.
Why now: A newly disclosed remote code execution flaw in a ubiquitous compression library has developers rushing to assess their exposure.
Evidence
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software · The Hacker News
Elsewhere
API: https://socialmediatrends-api.osmike.com/v1/trends/3779294