100
Broccoli2Shell: the Brotli decoder bug (CVE-2026-111497) - Affecting Node.js, Python, C library (broccoli2shell.com)
submitted 5 days ago by SirHaxalot@nord.pub to c/technology@lemmy.world
14 comments fedilink hide all child comments

CVE-2026-111497 (Broccoli2Shell, aka Node2Shell): an out-of-bounds write in Google's Brotli decoder affecting Node.js, Python Brotli/brotlicffi and anything built on the C decoder. Affected versions, how to check, and how to fix it.

you are viewing a single comment's thread
view the rest of the comments
[-] darklamer@feddit.org 8 points 4 days ago

Yes, that's kinda how computers work?

No, it's only the most common way. There are also lots of systems where it's perfectly possible, even normal, to upgrade running processes in-place without restarting.

[-] Randelung@lemmy.world 2 points 3 days ago

I'm still impressed by Erlang and their hot swappable code mechanics. This isn't really relevant to library updates, but still!

this post was submitted on 26 Oct 2026
100 points (99.0% liked)

Technology

89269 readers
4055 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws