Evolving Threat: http2shell is an RCE in node, Python, and more
nitter.click14 points by cowlevel an hour ago
14 points by cowlevel an hour ago
Interestingly the commit that fixes this in brotli dates back to February https://github.com/google/brotli/commit/0ed4268a4401abcb4472...
Likely mitigation: disable brotli (br) encoding