Brotli Decoder Flaw Allows Remote Code Execution: Found by OpenAI Red Team, Node.js Patches Released
A memory-handling flaw in the Brotli decoder lets attackers run code remotely without any authentication. On October 23, 2026, OpenAI disclosed that i...