SecurityBleepingComputerabout 2 hours ago
Critical HTTP2Shell Brotli Vulnerability Patches
3 min read
A critical flaw dubbed HTTP2Shell in the Brotli C decoder library affects versions 1.0.3 through 1.2.0 and enables remote code execution. Google released stable fixes on October 21, while PyPI packages became available on October 23. The vulnerability impacts Node.js, Python clients, and.NET, requiring immediate emergency patches to prevent memory corruption and privilege escalation.
Level
Hype check
Tap to vote and see what everyone thinks.