During this red-teaming exercise, we also found a vulnerability that allows f…

During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy.

The flaw could let an attacker run their

原文链接：https://x.com/OpenAI/status/2113766354386084338

中文翻译（AI 生成，仅供参考）

在这次红队演练中，我们还发现了一个漏洞，允许在 Brotli 中进行未认证的远程代码执行。Brotli 是一种广泛部署的压缩库，已被许多软件使用，例如 Node.js、Bun 和 Envoy。

该缺陷可能让攻击者运行他们的