Node.js Brotli compression hides an RCE
A buffer overflow in Node's built-in Brotli decompressor lets attackers run code by sending compressed data. The fix is already out.
Read the note 1 min read
From the notebook
brotli.
1 note on this topic.