brotli

Blog All categories All authors All tags
Preview image for a blog post

Critical Brotli Decoder Vulnerability (CVE-2026-111497) Threatens Node.js, Bun, Python, and Beyond with RCE

Memory corruption in Google's Brotli decoder (CVE-2026-111497) enables RCE across Node.js, Bun, Python, and other widely-used software.