https://cybercrime.club/tags/open-source/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usMon, 26 Oct 2026 11:04:14 -0400https://cybercrime.club/posts/broccoli2shell-cve-2026-111497-brotli-decoder-out-of-bounds-write-nodejs-rce/Mon, 26 Oct 2026 11:04:14 -0400https://cybercrime.club/posts/broccoli2shell-cve-2026-111497-brotli-decoder-out-of-bounds-write-nodejs-rce/A CVSS 9.2 out-of-bounds write in Google's Brotli decoder (CVE-2026-111497) lets crafted compressed data corrupt memory in Node.js and other consumers; public PoCs exist and Node.js shipped fixes October 21.vulnerabilities