{"id":"thehackernews-a64123d82829","seq":725898,"kind":"news","title":"Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software","url":"https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html","permalink":"https://vulnpulse.app/items/thehackernews-a64123d82829","summary":"A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a buffer and corrupt a program's memory, potentially","severity":null,"techs":["nodejs","python"],"cves":["CVE-2026-111497"],"tags":["security"],"source":{"id":"thehackernews","name":"The Hacker News"},"published_at":"2026-10-24T08:45:56.000Z","fetched_at":"2026-10-24T10:18:51.240Z"}