home.social

Search

3 results for “nscur0”

  1. OTOH, it's probably only a matter of time until someone finds an issue similar to php2shell in the JVM. In which case, well, the level of "we're fucked"-ness will increase to a new level. Until then, sunshine and rainbows.

  2. Turns out the "official" Brotli Java library, org.brotli:dec, which has not seen a public update for *9 years*, is not affected by node2shell/http2shell/brotli4shell/whatever because it's pure Java and not JNDI for once.

    If you stayed on the arguably dormant library instead of migrating to newer variants that wrap the Brotli C impl, your next week will look a lot less painful.

Share on Mastodon

Enter the server where you have an account.