AIQB
TutorialsOrdinary

Node2Shell Reaches Python: If Brotli Is Installed, requests Asks Servers for br

Source: DEV Community·

Summary

CVE-2026-111497 also hits PyPI's Brotli and brotlicffi, which requests, httpx and aiohttp use when installed. Upgrade to 1.2.1 and rebuild your images.
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-8da1ae6486f813b44c1279b9
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
Building a Linux GPU Driver for the M4 Mac mini in One Month, Mostly With Coding Agents
Apple Silicon is powerful hardware, but Linux support on it has always been a community-driven uphill...
Source: DEV Community
TutorialsOrdinary
Sloth Drawer: an offline agent that reads the manuals you already own and prints one maintenance card per device
I own 11 devices, and I could not tell you when any of them last needed cleaning — the manual...
Source: DEV Community
TutorialsOrdinary
Two layers or it didn't happen: marking AI images for the EU AI Act in pure TypeScript
Since 2 August 2026, the EU AI Act requires AI products to mark generated content in a...
Source: DEV Community
TutorialsOrdinary
Everyone Clicks 'I Agree.' No One Reads Them: I Fine-Tuned a 4B Model with Tinker to Catch Unfair Terms of Service in 30 Seconds
A 9,000-word contract scanned in 30 seconds. How I fine-tuned Qwen 4B with Tinker on the LexGLUE UNFAIR-ToS benchmark to catch arbitration waivers, unilateral changes, and liability caps.
Source: DEV Community · Qwen
TutorialsOrdinary
Can You Break Our AI Security Defenses? Help Test Buried Injections & Taintgate
Here's an uncomfortable test. Take your "we block prompt injection" guardrail, and send it...
Source: DEV Community
TutorialsOrdinary
Your MCP Tools Are an API for a Very Literal Intern
Picture a tool called save that takes a content string. You ask an agent to save a 12-page...
Source: DEV Community
TutorialsOrdinary
How I built Live Voice: one tool contract, six realtime voice providers
How Fud AI's Live Voice works: a shared tool contract across iOS, Android and a Cloudflare Worker, six realtime providers, and a locked-down hosted relay.
Source: DEV Community
TutorialsOrdinary
Fridge Sloth 🦥: snap your fridge, get a grocery list and healthy meals, fully offline on Gemma
One photo of your fridge gives you a grocery list and three healthy meals, running entirely on a 6-year-old M1 MacBook with Gemma 3 and Ollama, traced with Sentry.
Source: DEV Community · Ollama
TutorialsOrdinary
What Building Real Software Taught Me About AI Coding Agents
AI coding agents are getting better at writing code. But after testing several of them on real...
Source: DEV Community
TutorialsOrdinary
SEO Is Changing: How to Get Your Brand Recommended by ChatGPT, Gemini & Google AI
Imagine someone asks ChatGPT: "What are the best digital marketing tools for a small business?" Or...
Source: DEV Community · ChatGPT / Gemini