Join Nostr
2026-10-26 16:04:31 UTC

Dan Ramos 🇵🇹🇺🇸:verified: on Nostr: "🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic. ...

"🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic.

• .NET: patched by Microsoft
• FFmpeg: hit via a crafted JPEG XL image
• ClickHouse: one request crashes it, fix not yet released
• Apache Arrow: no fix yet"

Details: https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html

https://x.com/TheHackersNews/status/2114644189816533415
https://nitter.tiekoetter.com/TheHackersNews/status/2114644189816533415