Out-of-bounds Write (HTTP2Shell)

Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the bundled Brotli decoder, specifically DecodeBlockTypeAndLength in decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream with an...