CyberReportedHighDevelopingFeatured

Brotli Decoder Flaw Triggers Patching Across Node.js, .NET, PowerShell, Python

An out-of-bounds write vulnerability in Google's Brotli decoder affects multiple ecosystems including Node.js, .NET, PowerShell, and Python packages, potentially enabling code execution. The flaw is being actively patched across vendors, indicating broad supply-chain impact. The severity and exploitation status remain unclear, but the breadth of affected platforms elevates the risk.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works

SecurityWeekabout 23 hours agoUSengCredibility 29%View source

Score Breakdown

Mosaic Score7.2

Model confidence0.7

Significance0.8

Source credibility0.3

Intelligence Tags

#brotli #vulnerability #code-execution #supply-chain #patching #nodejs

Entities

United StatescountrySupply Chainconcept

Source

Part of 2 situations

developingCyber17h ago

.NET, Node.js, PowerShell, Python Affected by Critical Brotli RCE Flaw

Microsoft has issued emergency out-of-band patches for a critical remote code execution (RCE) vulnerability in the Brotli compression library, affecting multiple .NET versions. This flaw, tracked as Broccoli2Shell/Node2Shell/HTTP2Shell, is confirmed to allow unauthenticated attackers to execute code on vulnerable servers. The vulnerability is also confirmed to impact Node.js, PowerShell, and Python ecosystems, indicating a broad supply-chain risk.

→ stable·↑2 signals·USScore 5.0

activePoliticsJustice7m ago