9.2
Hacker News
dev-community
24 Oct 2026, 4:06 PM
CVE-2026-111497 (Broccoli2Shell) is an out-of-bounds write in Google's Brotli C decoder, present in libbrotli 1.0.3 through 1.2.0, fixed in 1.0.10, 1.1.1 and 1.2.1. GitHub rates it 9.2 Critical (CVSS 4.0); Node.js rates it High, with fixes in Node 26.12.1, 24.22.1 and 22.23.4 — Node 25, 23, 20 and older get no fix and are EOL. The root cause is that DecodeBlockTypeAndLength() in c/dec/decode.c returned a plain boolean, so callers could not distinguish a malformed stream from one needing more input, and the fast path ignored the return value, letting attacker bytes overflow an eight-byte internal buffer.
9.1
Hacker News
dev-community
21 Oct 2026, 10:00 PM
LiteLLM 1.107.0 on PyPI shipped with three malicious files in site-packages across all seven wheels (Linux, macOS, Windows): cook.pth, which imports cook.py and runs on every Python interpreter start — even in processes that never import litellm — harvesting SSH keys, cloud credentials, CI/CD secrets, AI tool tokens, browser passwords and the LLM provider keys stored in a LiteLLM proxy database, encrypting them and posting to www.litellm[.]dev; and sitecustomize.py, which launches a daemon that hourly re-reads a server address from a GitHub file, re-runs the stealer and executes downloaded code. The upstream GitHub source does not contain the implant, and PyPI has since removed the release. Versions 1.106.2, 1.107.0rc1 and 1.107.0rc2 are clean, as are the pinned companions litellm-proxy-extras==0.4.110 and litellm-enterprise==0.1.78.
9.0
Hacker News
dev-community
21 Oct 2026, 9:43 PM
Wiz Research disclosed PHP2Shell, two CVEs in the core PHP engine (CVSS up to 9.2) allowing unauthenticated remote code execution and Heartbleed-style memory disclosure — leaking passwords, tokens, API keys and certificates across requests — independent of the app running on top. Every PHP release going back to 5.4 is affected by at least one flaw, and PHP shipped patches on October 21, 2026. The researchers state that the exploit chain was at the edge of what human researchers could practically achieve, and that frontier AI models substantially lowered that barrier.
8.5
The Hacker News
security
26 Oct 2026, 3:49 PM
Wiz says a campaign it calls Gheist has used stolen GitHub tokens since September 15 to push branches named ci-sync- plus six random characters, plant Actions workflows that print repository secrets into logs, then download the logs and delete the runs. Wiz recovered more than 13,500 planted branches from more than 850 compromised accounts, with successful runs in private repositories and GitHub Enterprise Server; GitHub's suspicious-workflow approval guard stopped every public-repo run Wiz checked but does not cover private repos or GitHub Enterprise Server. Deleting the branch or run does not undo the exposure: Wiz says to rotate every secret the repository could read and revoke the token that pushed the branch.
8.5
Hacker News
dev-community
24 Oct 2026, 4:06 PM
CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder affecting versions 1.0.3 through 1.2.0 on all platforms (CVSS v4.0 9.2, Critical), where a crafted Brotli stream can leak memory, crash a process, or potentially execute code. Disclosed as "Node2Shell" for Node.js on Wednesday 21 Oct 2026, it widened to Python packages the next day and, by Friday 23 Oct, to other major languages and HTTP-using services; patches now exist for libbrotli, Python, C++, Node.js, bun and Envoy. Aikido notes Apache and Nginx do not decode Brotli by default, and OpenAI says it found the flaw in February and reported it then, though the root-cause fix in Brotli source was not recognised as a security issue at the time.
8.5
Latent Space
developer-ai
23 Oct 2026, 6:09 PM
Latent Space's AINews roundup documents a ~48-hour cluster of critical disclosures it calls 'Black October': an unauthenticated RCE in PHP ('PHP2Shell'), a CVSS 10 GitLab flaw affecting releases since 2014 (patched in 19.5.1), a Node.js Brotli decoder RCE fix, NGINX and HTTP/3 DoS issues, LiteLLM 1.107.0 shipping with a password stealer, Railway telling users to rotate secrets after possible customer-key exposure, Zeabur shutting down after 321,810 accounts were breached, and eMudhra CA key compromise. The piece frames the volume of simultaneous patches as the story, not any single CVE.