CRITICAL HTTP2SHELL BROTLI VULNERABILITY TRIGGERS EMERGENCY PATCHES

Summary from the TLDR InfoSec newsletter

Originally reported as a Node.js vulnerability, researchers found that a critical flaw in the Brotli decoder could affect software across multiple ecosystems that use it. The vulnerability stems from a buffer overflow that an attacker can exploit with a specially crafted Brotli-compressed stream. Node.js, .NET, and several Python libraries released emergency patches to fix the vulnerability.