Broccoli2Shell: Brotli decoder out-of-bounds write (CVE-2026-111497)
- Who's exposed You're at risk if your code, or any library it uses, decompresses Brotli data that someone else controls.
- That happens in more places than you'd think, because HTTP clients decompress Brotli responses on their own.
- Your app fetches a URLNode's built-in fetch() decodes Content-Encoding: br responses automatically.
Unverified
- Who's exposed You're at risk if your code, or any library it uses, decompresses Brotli data that someone else controls.
- That happens in more places than you'd think, because HTTP clients decompress Brotli responses on their own.
- Your app fetches a URLNode's built-in fetch() decodes Content-Encoding: br responses automatically.
Sources: Broccoli2shell