Security research team
Appears in 1 story
Disclosed the vulnerability
A single memory bug went from an unlabeled commit in Google's Brotli library in February to a critical vulnerability called HTTP2Shell by late October. Node.js patched it on October 21; three days later researchers had traced it across Python HTTP clients, Bun, curl, and Express middleware that decode Brotli by default.
Updated 2 hours ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
