So I briefly looked into Euro Office, because I am not a fan of the technical approach that Collabora Office uses. So I started by looking how the project is structured and built and oh dear...
https://github.com/Euro-Office/DocumentServer/issues/441
In short: It's still based on an EoL version of NodeJS (20.x) and is probably vulnerable to the Brotli Vuln which *checks website* allows remote code execution.
Daniel Molkentin
npub10f…mxx2u
2026-10-23 18:21:25 UTC
Author Public Key
npub10fukgzwwez46wz9pvczw4cspf0gj3dh3s56py65nfttmnlp0l8ks2mxx2uSeen on
wss://relay.ditto.pubPublished at
2026-10-23 18:21:25 UTCEvent JSON
{
"id": "f7f6496a5ec5af77c906199f658661bd30f79cdd9aa711619e689474f999440c",
"pubkey": "7a796409cec8aba708a16604eae2014bd128b6f18534126a934ad7b9fc2ff9ed",
"created_at": 1792779685,
"kind": 1,
"tags": [
[
"proxy",
"https://chaos.social/users/danimo/statuses/117491609500932208",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "So I briefly looked into Euro Office, because I am not a fan of the technical approach that Collabora Office uses. So I started by looking how the project is structured and built and oh dear...\n\nhttps://github.com/Euro-Office/DocumentServer/issues/441\n\nIn short: It's still based on an EoL version of NodeJS (20.x) and is probably vulnerable to the Brotli Vuln which *checks website* allows remote code execution.",
"sig": "b5bd5848bfc4e766769e15ec780ab115f07cadff6eca7954d102d30fdef9ffa97d91b02fcade48bd16cf833f7d764cce380263d3c2511969fba739c833faf71d"
}