vulnerability
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
HighCVSS 9.2
Summary
A memory-corruption vulnerability in Google's Brotli decoder has been discovered and is affecting various software components including Node.js, Bun, and Envoy proxies. The vulnerability was initially fixed in February but wasn't recognized as a security risk until recently. Updates are necessary to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data