Brotli

OpenAI red team finds Brotli remote code execution flaw

In a red-teaming exercise, OpenAI found an unauthenticated remote code execution vulnerability in Brotli, a widely deployed compression library used by Node.js, Bun, and Envoy.