< Back to situations

[ORGANIZATION]

Qihoo 360

Featured in 2 tracked stories · first seen

Situations

[ACTIVE] [TECHNOLOGY]

Brotli compression library vulnerability

2 clusters · 8 sources · last updated

Latest: Brotli compression library vulnerability affects Node.js and Python

A critical security vulnerability, identified as CVE-2026-111497 and nicknamed ‘Broccoli2Shell’, has been discovered in the Brotli decompression library. The flaw originates from an out-of-bounds write error in the upstr

Also covered in