Node.js Bundled a Decoder That Wrote Past Its Eight-Byte Buffer
This story is from 2026-10-27. It is preserved in the archive; the latest stories are on the live feed.
TL;DR Brotli is Google's compression format, and a decoder is the code that turns a compressed br stream back into plain bytes; Node.js ships one inside node:zlib so applications can decompress responses and request bodies without an extra dependency. The upstream Brotli patch and vulnerable decode…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-27 19:00 · DEV Community — AI
Node.js Bundled a Decoder That Wrote Past Its Eight-Byte Buffer