#http-compression on Hacker News

2 stories tagged http-compression, newest first.

Screenshot of broccoli2shell.com: Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more

Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more (broccoli2shell.com)

384 points by theanonymousone 2 days ago | 200 comments

Aikido blog post explaining CVE-2026-111497, a critical Brotli decoder out-of-bounds write affecting Node.js, Python, and HTTP libraries, with patch versions and workarounds.

brotli cve-2026-111497 node2shell nodejs

Screenshot pending…

Compression and Concatenation on the Web (theconsensus.dev)

8 points by eatonphil 16 days ago | 2 comments

An article on theconsensus.dev about how compression and file concatenation interact in web asset delivery.

http-compression gzip brotli web-performance

#http-compression on Hacker News

Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more(broccoli2shell.com)

Compression and Concatenation on the Web(theconsensus.dev)

Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more (broccoli2shell.com)

Compression and Concatenation on the Web (theconsensus.dev)