Hacker News new | past | comments | ask | show | jobs | submit
nairboon | on: Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more
Brotli2Shell seems to be a more appropriate name for this.
mkl | parent | next
Not when you're prioritising sensationalism over accuracy. Everyone's heard of HTTP, but hardly anyone's heard of brotli.
brazukadev | root | parent
call it GoogleBrotli2Shell then.
sli | parent
There's this other name for the same vuln: https://broccoli2shell.com/