Brotli decoder flaw se Node.js, Python, Bun me remote code execution
Yahan publish hua 26 Oct, 6:19 pm IST · Source ki tareekh 26 Oct, 3:51 pm IST
Source label batata hai khabar kahan se aayi, independent verification nahi. Reading guide
Google ke Brotli decoder me out‑of‑bounds write vulnerability discover hui, jo Node.js, Python aur Bun jaise packages me remote code execution ka kaaran ban sakti hai. Is flaw ko ab Microsoft, .NET aur PowerShell me bhi patch kiya ja raha hai.
Aapko kya karna haiApne server ke packages ko latest version tak update karo ya vendor ke security advisory follow karo.
Updates aur sources (1)
Har update ka asli source neeche hai. Multiple links independent verification ka proof nahi hain.
- SecurityWeek ne is flaw ko publicly disclose kiya aur patching timeline batayi.Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages ↗
Aapki raay