As cited
Copy frozen at (site build).
vulnerabilities
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
A flaw in Google's Brotli decoder library involving an out-of-bounds write affects multiple ecosystems including Node.js, .NET, PowerShell, and Python packages, enabling remote code execution. Vendors across these platforms have released patches in response to the vulnerability.
Why it matters: Developers and operations teams using Node.js, .NET, PowerShell, or Python must patch their Brotli implementations immediately, as this flaw allows code execution through a widespread compression library used across web applications and infrastructure.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
A flaw in Google's Brotli decoder library involving an out-of-bounds write affects multiple ecosystems including Node.js, .NET, PowerShell, and Python packages, enabling remote code execution. Vendors across these platforms have released patches in response to the vulnerability.
Why it matters: Developers and operations teams using Node.js, .NET, PowerShell, or Python must patch their Brotli implementations immediately, as this flaw allows code execution through a widespread compression library used across web applications and infrastructure.
- Source published
- First seen by Cybersecurity Tracker