Brotli is bigger than node2shell, php2shell or an npm bug. Its copied into runtimes, databases, document readers, image libraries, language bindings, and native packages. (CVE-2026-111497)
gnabgib · 2026-10-27 23:49:30 UTC
Are you unaware that Node2Shell (cve-2026-111497) got renamed to Broccoli2Shell (reason unjustified)? It's not bigger.
Comments
Node2Shell = cve-2026-111497 (14 points, 5 days ago) https://news.ycombinator.com/item?id=50203180
Broccoli2Shell (402 points, 4 days ago, 219 comments) https://news.ycombinator.com/item?id=50219177