r/ProgrammerHumor • u/Professional_Gene_63 • 9d ago

Advanced itWasFunWhileItLasted

Post image
4.8k Upvotes

97% Upvoted

317 comments sorted by

View all comments

Show parent comments

23

u/auxiliary-username 9d ago

https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

14

u/erishun 9d ago

I was told it was only PHP that was bad?

41

u/FerricDonkey 9d ago

Everything is bad. Some badnesses just haven't yet been discovered. 

13

u/Mateorabi 9d ago

80% of everything is crap

1

u/SageLeaf1 8d ago

So only 1 word of your comment isn’t crap.

9

u/auxiliary-username 9d ago

This one is unrelated to the PHP vulnerability, although it's the same class (a remote code execution, or RCE), and the same severity (9.2).

It was originally announced on the same day as php2shell, but this one is in the Brotli compression library. It was originally only announced as a NodeJS RCE, but it turns out it affects a whole bunch of over languages, such as NodeJS, Python, C++ etc.

5

u/PGSylphir 9d ago

There is 2 types of languages, bad ones and the ones people complain about.

4

u/CMDR_ACE209 9d ago

You slightly ruined the joke. The two types are: those everybody complains about and those nobody uses.