brotlicffi

Search everything

Mentions · 7d3
Mentions · 30d3
All mentions3
First seenOct 24, 2026
Last mentioned4h ago

Timeline

3 articles · newest first

Brotli decoder flaw CVE-2026-111497 can lead to remote code execution

Patches cover Node.js 22.23.4, 24.22.1 and 26.12.1; Wiz says 91% of cloud environments have vulnerable resources.

Wiz Blog14:46 UTC · 4h agoVulnerability 7 sourcesCVE-2026-111497

Brotli decoder flaw CVE-2026-111497 can leak memory or run code

Versions 1.0.3 through 1.2.0 are affected; fixed releases include Brotli 1.2.1, Node.js 22.23.4, 24.22.1 and 26.12.1.

Lobsters · securityOct 24, 11:01 UTC · 1d agoVulnerabilityCVE-2026-1114973 · 2 reads

Brotli decoder flaw CVE-2026-111497 also hits Node.js, Bun, Python and Envoy

Google rates the memory-corruption bug 9.2; code execution was shown only on one Node.js build, with no attacks reported.

The Hacker Newsupdated 14:46 UTC · 4h agofirst Oct 24, 08:45 UTC · 1d agoVulnerability 7 sourcesCVE-2026-1114975 · 2 reads

Related CVEs

by mentions

CVE-2026-11149733%9.2
Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
published 3d agoGoogle BrotliPoC ×16

Appears with

OpenAIorganization · 3
Istioproduct · 3
Brotliproduct · 3
Googlevendor · 3
Node.jsproduct · 3
Bunproduct · 3
Envoyproduct · 2
Impervaorganization · 2
Envoy Proxyproduct · 1
CISAorganization · 1
Aikidoorganization · 1
Red Hatorganization · 1
cdxgenproduct · 1
andybalholm/brotliproduct · 1
libbrotliproduct · 1
Wizorganization · 1

Entities are extracted by the model from each article. First seen Oct 24, 2026, last mentioned 4h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.