GgoogleDE first seen 4 d ago, last 14 h ago, peak #2

Critical Brotli Decoder Flaw Hits Node.js and Beyond

Original: cve-2026-111497

Security researchers are warning about a critical vulnerability in the Brotli compression decoder that allows remote code execution across all supported versions of Node.js. The flaw, dubbed Broccoli2shell, also affects Bun, Python and other widely used software that bundles the Brotli library. Node.js has released updates patching both its own and inherited vulnerabilities, and developers are urged to upgrade immediately as coverage spreads across the US, UK and Germany.

Why now: A newly disclosed critical remote code execution vulnerability affecting widely used runtimes prompts urgent patching and security discussion.

Node.js Brotli Bun Python The Hacker News

Open on google →

Rank over time, top of the chart is #1. 11 snapshots from 4 d ago to 14 h ago.

Evidence

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability · wiz.io
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software · The Hacker News
Node.js fixes its own and inherited security vulnerabilities · heise online
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions · The Hacker News

Elsewhere

API: https://socialmediatrends-api.osmike.com/v1/trends/3342413