As cited
Copy frozen at (site build).
vulnerabilities
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption flaw in Google's Brotli decoder library allows attackers to overwrite memory past the end of a buffer using crafted compressed data. The vulnerability, tracked as CVE-2026-111497 with a CVSS score of 9.2, affects multiple widely used programs including Bun, Python Brotli packages, brotlicffi, and Envoy proxies that decompress Brotli-compressed data.
Why it matters: Developers and infrastructure teams running Bun, Python environments with Brotli packages, or Envoy proxies must patch immediately, as this remote code execution vector affects popular software across the stack.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption flaw in Google's Brotli decoder library allows attackers to overwrite memory past the end of a buffer using crafted compressed data. The vulnerability, tracked as CVE-2026-111497 with a CVSS score of 9.2, affects multiple widely used programs including Bun, Python Brotli packages, brotlicffi, and Envoy proxies that decompress Brotli-compressed data.
Why it matters: Developers and infrastructure teams running Bun, Python environments with Brotli packages, or Envoy proxies must patch immediately, as this remote code execution vector affects popular software across the stack.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption vulnerability in Google's Brotli decoder, tracked as CVE-2026-111497 with a CVSS score of 9.2 (version 4.0), affects multiple widely used software including Bun, Python Brotli packages, brotlicffi, and Envoy proxies. Crafted compressed data can trigger a buffer overflow that corrupts program memory and may enable remote code execution.
Why it matters: Practitioners using Bun, Python Brotli libraries, or Envoy proxies in production should prioritize patching, as this vulnerability allows unauthenticated remote code execution on systems processing untrusted Brotli-compressed data.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption vulnerability in Google's Brotli decoder affects multiple software projects that decompress Brotli-compressed data, including Bun, Python packages, and Envoy proxies. Crafted compressed input can trigger a buffer overflow that corrupts program memory and potentially enables remote code execution. The flaw, tracked as CVE-2026-111497 with CVSS 9.2, has been identified across numerous widely-used tools and libraries.
Why it matters: Organizations running Bun, Python applications using Brotli libraries, Envoy proxies, Node.js, or other affected software face remote code execution risk from specially crafted Brotli payloads and must patch or update affected components immediately.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
CVE-2026-111497, a memory-corruption flaw in Google's Brotli decoder, affects multiple widely used programs that decompress Brotli-compressed data, including Bun, Python Brotli and brotlicffi packages, and Envoy proxies. Attackers can craft malicious compressed data to trigger a buffer overflow and corrupt program memory, potentially enabling remote code execution (RCE).
Why it matters: Developers and operators using Bun, Python Brotli libraries, brotlicffi, or Envoy proxies must patch immediately, as this CVSS 9.2 flaw is already tracked in the Known Exploited Vulnerabilities catalog and enables RCE from untrusted Brotli input.
- Source published
- First seen by Cybersecurity Tracker