✉news TechnologyCybersecurity first seen 21 h ago, last 18 h ago, peak #37
Security flaws reported in Brotli decoder libraries
Original: Brotli Decoder Vulnerabilities (Node2Shell, Broccoli2Shell, HTTP2Shell)
Newly disclosed vulnerabilities in Brotli decoder implementations have been given names including Node2Shell, Broccoli2Shell and HTTP2Shell, suggesting the flaws could allow attackers to achieve remote code execution in environments that parse Brotli-compressed data. Brotli is a compression format widely used across web servers, browsers and developer tooling, so affected libraries are broadly deployed. Esri has published an advisory referencing the issues, and security teams are checking whether their products embed vulnerable decoder code.
Why now: Potential remote code execution in a compression library used almost everywhere on the web makes the disclosure urgent for developers and security teams.
BrotliEsriNode.jsBroccoliHTTP/2
Rank over time, top of the chart is #1. 3 snapshots from 21 h ago to 18 h ago.
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/4007072