On 2026-10-23 15:12:16, Jan Schaumann wrote: > > This trickles down into any consumer
Only those dumb enough to bundle or statically link their dependencies. The bare minimum in terms of software engineering would prevent these 1990-ass vulnerabilities. (NodeJS has a --shared-brotli option, so NodeJS should not be an issue for distros that are paying attention.)
