Security research unit
Appears in 1 story
Publicly demonstrated code execution on Node.js 24.22.0, withheld the exploit
A memory-corruption bug in Google's Brotli compression decoder is turning attacker-controlled HTTP traffic into remote code execution across a dozen ecosystems, including many Python setups. Security firm Imperva demonstrated code execution on an unmodified Node.js build, and researchers traced the same flaw through Python's brotli and brotlicffi packages.
Updated 1 hour ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
