Node2Shell proof‑of‑concept se Node.js Brotli decoder me RCE dikhaya gaya
Yahan publish hua 23 Oct, 8:29 pm IST · Source ki tareekh 23 Oct, 2:10 pm IST
Source label batata hai khabar kahan se aayi, independent verification nahi. Reading guide
Researchers ne crafted Brotli data se Node.js 24.22.0 image par remote code execution ka demo diya (CVE‑2026‑111497).
Aapko kya karna haiNode.js ko patched version me upgrade karo aur Brotli decoder ke input ko validate karo.
Updates aur sources (1)
Har update ka asli source neeche hai. Multiple links independent verification ka proof nahi hain.
- Official Node.js build me bina custom changes ke exploit ka proof mil gaya.Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data ↗
Aapki raay