Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...
An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...
Node.js says the Brotli decoder ‘kept appending input bytes to an eight-byte internal buffer’. Microsoft has now patched .NET ...
近日公开的一个高危漏洞出现在谷歌开发的流行压缩库中，影响远不止开源的Node.js JavaScript运行时，澳大利亚安全研究员发现了这一点。 OpenSourceMalware的联合创始人兼首席技术官Paul McCarty对多个软件生态系统中的开发者工具和库进行了调查，这些生态系统实现或集成了谷歌的Brotli解压缩，以寻找对底层漏洞的暴露情况。 他确认了一系列可能受影响的软件，涵盖了多个常 ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results