NHacker Next
  • new
  • past
  • show
  • ask
  • show
  • jobs
  • submit
▲Node.js security advisory: Brotli decoder RCE (CVE-2026-111497) (vercel.com)
8 points by khaled_ismaeel 3 hours ago | 1 comment
sippeangelo 2 hours ago [-]
From what I can gather, Express 5's body-parser has Brotli decoding enabled by default which would make any endpoint with this middleware vulnerable to this. Am I mistaken?
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
Rendered at 11:53:21 GMT+0000 (Coordinated Universal Time) with Vercel.