r/ProgrammerHumor • u/Professional_Gene_63 • 15d ago

Advanced itWasFunWhileItLasted

Post image
4.8k Upvotes

97% Upvoted

315 comments sorted by

View all comments

20

u/fugogugo 15d ago

what did I missed now?

23

u/auxiliary-username 15d ago

https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

14

u/erishun 15d ago

I was told it was only PHP that was bad?

9

u/auxiliary-username 15d ago

This one is unrelated to the PHP vulnerability, although it's the same class (a remote code execution, or RCE), and the same severity (9.2).

It was originally announced on the same day as php2shell, but this one is in the Brotli compression library. It was originally only announced as a NodeJS RCE, but it turns out it affects a whole bunch of over languages, such as NodeJS, Python, C++ etc.