Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

The document is a cybersecurity news feed covering multiple significant vulnerabilities, active exploitation campaigns, supply-chain compromises, credential leaks, malware operations, and emerging AI-agent security risks. Notable items include the actively exploited Arista VeloCloud and Collabora Online flaws, Brotli decoder memory corruption enabling potential RCE across Node.js and other ecosystems, critical PHP and Ruby/GitLab vulnerabilities, a Pillow EPS command-execution issue, compromised LiteLLM release infrastructure, and destructive Sandworm-linked activity. Several issues involve un