brotli4j

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 26, 2026
Last mentioned2d ago

Timeline

2 articles · newest first

Brotli decoder flaw CVE-2026-111497 exploited across many runtimes

CISA lists the out-of-bounds write; a public proof of concept crashes standard builds, and patched Node.js still reports Brotli 1.2.0.

Datadog Security Labsupdated Oct 30, 09:53 UTC · 15h agofirst Oct 29, 00:00 UTC · 2d agoExploit / PoCExploited9 sourcesCVE-2026-1114971

Node.js Brotli decoder flaw can crash or run code (CVE-2026-111497)

Fixed builds are 22.23.4, 24.22.1 and 26.12.1; Rapid7 reports no known exploitation and it is not on the KEV list.

Rapid7 Blogupdated Oct 28, 08:37 UTC · 2d agofirst Oct 26, 17:32 UTC · 4d agoVulnerability 30 sourcesCVE-2026-1114971

Related CVEs

by mentions

CVE-2026-11149783%9.2
Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
published 8d agoGoogle BrotliKEVPoC ×25

Appears with

Brotliproduct · 2
.NETproduct · 2
Istioproduct · 2
Googlevendor · 2
Node.jsproduct · 2
Envoyproduct · 2
Bunproduct · 2
Node.js Projectvendor · 1
CISAorganization · 1
brotlicffiproduct · 1
Impervaorganization · 1
Datadogorganization · 1
Python Brotliproduct · 1

Entities are extracted by the model from each article. First seen Oct 26, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.