✉news TechnologyCybersecurity first seen 23 h ago, last 20 h ago, peak #37
Security flaws reported in Brotli decoder libraries
Original: Brotli Decoder Vulnerabilities (Node2Shell, Broccoli2Shell, HTTP2Shell)
Newly disclosed vulnerabilities in Brotli decoder implementations have been given names including Node2Shell, Broccoli2Shell and HTTP2Shell, suggesting the flaws could allow attackers to achieve remote code execution in environments that parse Brotli-compressed data. Brotli is a compression format widely used across web servers, browsers and developer tooling, so affected libraries are broadly deployed. Esri has published an advisory referencing the issues, and security teams are checking whether their products embed vulnerable decoder code.
Why now: Potential remote code execution in a compression library used almost everywhere on the web makes the disclosure urgent for developers and security teams.
BrotliEsriNode.jsBroccoliHTTP/2
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/4007072