Tag

Brotli

All articles tagged with #brotli

security2 hours ago•0 min saved

PHP Rebuilds Windows Packages to Patch Critical Brotli Decoder Flaw

PHP released updated Windows packages for versions 8.2 through 8.5 to fix a critical memory corruption flaw in the bundled Brotli library. The update addresses CVE-2026-111497, which allows remote code execution via crafted compressed HTTP responses. Although the PHP version numbers remain unchanged, the new builds include the fixed Brotli 1.2.1 library. Users are advised to download the new packages immediately, as the vulnerability is rated Critical by Google and affects applications using automatic decompression.

via The Hacker News|

#brotli #curl #cve-2026-111497

cybersecurity5 hours ago•19 min saved

Security Week: PHP2Shell Scans, eMudhra Exit, and AI Agent Exploits

A surge in critical remote code execution (RCE) vulnerabilities, including PHP2Shell and Brotli flaws, triggered widespread scanning and precautionary site shutdowns. Simultaneously, Indian firm eMudhra exited the certificate market after weak keys were compromised, while AI agents faced new attack vectors via malicious instruction files and leaked keys.

via The Hacker News|

#ai-agents #brotli #cybersecurity

security4 days ago•3 min saved

Node.js Patches Critical Brotli Decoder Flaw and Nine Other Vulnerabilities

Node.js released security updates on October 21 for versions 22.x, 24.x, and 26.x, addressing ten vulnerabilities. The most severe is an out-of-bounds write in the bundled Brotli decoder that could allow remote code execution. While a proof-of-concept exploit exists, it has only demonstrated full code execution on weakened test builds, not standard production environments. No active exploitation has been reported in the wild.

via The Hacker News|

#brotli #cve-2026-111497 #nodejs