Broccoli2Shell: Brotli decoder RCE (CVE-2026-111497) in Node.js, Python and more

  • tribut@infosec.pub
    link
    fedilink
    arrow-up
    1
    ·
    4 days ago

    True, but it will still reduce the chance of success to close to zero. If you assume your own users devices are compromised, there is nothing you can do to avoid exposure.