Open-source library maintainer
Appears in 1 story
Shipped patched releases 1.0.10, 1.1.1, and 1.2.1 on October 21
A memory-corruption bug in Google's Brotli compression decoder is turning attacker-controlled HTTP traffic into remote code execution across a dozen ecosystems, including many Python setups. Security firm Imperva demonstrated code execution on an unmodified Node.js build, and researchers traced the same flaw through Python's brotli and brotlicffi packages.
Updated 1 hour ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
