A Brotli decoder flaw behind a Node.js RCE also affects Bun, Python and other widely used software. Fixes are rolling out across Node.js, Envoy and others, while unpatched deployments handling untrusted compressed input stay exposed. Patch affected runtimes and proxies now. #AppSec #Brotli #NodeJS #Envoy

https://cyberworldops.eu/en/brotli-decoder-flaw-prompts-fixes-across-nodejs-envoy-and-other