#nodejs

What this server has with the tag: posts by people here, and posts from elsewhere that reached it. There's more of it on infosec.exchange.

Harry Sintonen@harrysintonen@infosec.exchange

For some reason the CVE-2026-111497 buffer overflow vulnerability in the decoder is mostly associated with , but this is far more wider issue. Brotli compression is supported by many client side applications processing HTTP responses. While some of them have sandboxes and quick update cycle (read: web browsers), many don't. In particular many devices and applications using / libcurl are affected and must be updated ASAP.

github.com/advisories/GHSA-9v8
nvd.nist.gov/vuln/detail/cve-2

GitHubCVE-2026-111497 - GitHub Advisory DatabaseA buffer overflow vulnerability in the Brotli decoder (c...