Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
Security researchers identified a critical flaw called 'HTTP2Shell' in Brotli, the C decoder library integrated into Node.js. The vulnerability allows attackers to corrupt memory and access sensitive data, prompting vendors to issue emergency patches. This affects systems running vulnerable versions of Node.js with Brotli compression enabled.
Key points
- Critical 'HTTP2Shell' vulnerability in Brotli C decoder
- Impacts Node.js and systems using Brotli compression
- Could enable memory corruption and data access
- Emergency patches being released
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
