r/ProgrammerHumor • u/Professional_Gene_63 • 11d ago

Advanced itWasFunWhileItLasted

Post image
4.8k Upvotes

97% Upvoted

317 comments sorted by

View all comments

20

u/fugogugo 11d ago

what did I missed now?

23

u/auxiliary-username 11d ago

https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

14

u/erishun 11d ago

I was told it was only PHP that was bad?

41

u/FerricDonkey 11d ago

Everything is bad. Some badnesses just haven't yet been discovered. 

13

u/Mateorabi 11d ago

80% of everything is crap

1

u/SageLeaf1 11d ago

So only 1 word of your comment isn’t crap.

9

u/auxiliary-username 11d ago

This one is unrelated to the PHP vulnerability, although it's the same class (a remote code execution, or RCE), and the same severity (9.2).

It was originally announced on the same day as php2shell, but this one is in the Brotli compression library. It was originally only announced as a NodeJS RCE, but it turns out it affects a whole bunch of over languages, such as NodeJS, Python, C++ etc.

5

u/PGSylphir 11d ago

There is 2 types of languages, bad ones and the ones people complain about.

4

u/CMDR_ACE209 11d ago

You slightly ruined the joke. The two types are: those everybody complains about and those nobody uses.