Runtime maintainer
Appears in 1 story
Patched in 22.23.4, 24.22.1, 26.12.1 released October 21
A memory-corruption bug in Google's Brotli compression decoder is turning attacker-controlled HTTP traffic into remote code execution across a dozen ecosystems, including many Python setups. Security firm Imperva demonstrated code execution on an unmodified Node.js build, and researchers traced the same flaw through Python's brotli and brotlicffi packages.
Updated 1 hour ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
