Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html
The Hacker NewsBrotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used SoftwareBrotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.