Brotli CVE-2026-111497 reaches .NET, FFmpeg, ClickHouse, and Arrow
JFrog showed crashes, memory corruption, and an endless loop; a full FFmpeg remote code execution exploit was not shown.
2
Stories per day · 30 days
2 RSS
Relatedapache-arrow1benchmarks1brotli1clickbench1cloudflare1compression1data-pipeline1ffmpeg1http2shell1infrastructure1node.js1observability1
4 stories, newest first · one card per story
Stories tagged #clickhouse
Rewinding the exponential: How we keep hardware usage down
Cloudflare details pipeline changes that deferred about 2.5 years of hardware growth.
4
16-Year-Old Researcher Discovers Microsoft Authentication Bug Exposing 17.3 Trillion Records
A teenage researcher found Microsoft Titan accepted unsigned JWTs, enabling admin SQL against huge internal analytics stores.
16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Records
A teenage researcher found Microsoft Titan accepted unsigned JWTs, potentially reaching an estimated 17.3 trillion stored rows.