Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

CVE-2026-111497: Memory corruption in Google Brotli decoder affects Node.js, Bun, Python Brotli libraries, Envoy proxies. Allows RCE via crafted compressed data.