Broccoli2Shell: Brotli decoder RCE (CVE-2026-111497) in Node.js, Python and more

  • tribut@infosec.pub
    link
    fedilink
    arrow-up
    1
    ·
    5 days ago

    Not if your threat model is “bots that scan the internet for vulnerable installations of X”.

    • pcouy@lemmy.pierre-couy.fr
      link
      fedilink
      arrow-up
      1
      ·
      5 days ago

      A lot of these bot requests come from what seems to be compromised hosts turned into scanners and residential proxies.