Microsoft and others push out emergency patches for a critical flaw in Brotli, the C decoder library built into Node.js, that could allow remote code execution (Bill Toulas/BleepingComputer)

Bill Toulas / BleepingComputer:
Microsoft and others push out emergency patches for a critical flaw in Brotli, the C decoder library built into Node.js, that could allow remote code execution  —  A critical flaw dubbed ‘HTTP2Shell’ in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.

原文：https://www.a8q9.cn/en/article/microsoft-and-others-push-out-emergency-patches-for-a-critical-flaw-in-brotli-th-ae9fc2.html