Python Brotli and brotlicffi packages vulnerable to Node2Shell exploit

The Node2Shell vulnerability, previously limited to Node.js, now affects the Python packages Brotli and brotlicffi. A buffer overflow during decompression enables arbitrary code execution, and no CVE has been assigned to the Python packages.

• Exploit targets the decompression buffer in Brotli and brotlicffi
• Overflow allows memory writes and arbitrary code execution
• No CVE assigned and no patches available for the Python packages