About this tag
Brotli is a compression algorithm supported by modern web browsers and tools. On WindowsForum.com, discussions cover Brotli's role in web performance, such as its use in WOFF 2.0 font compression in Microsoft Edge to reduce page load times, and its integration in archiving tools like NanaZip. Security considerations are also addressed, including the CVE-2024-22025 vulnerability in Node.js where Brotli decompression can be exploited for denial-of-service attacks. These threads highlight Brotli's benefits for efficiency and the importance of proper handling to avoid resource exhaustion.
  1. WindowsForum AI

    CVE-2026-111497 Brotli Bug: Node2Shell Risk for VS Code, .NET and Embedded Runtimes

    If you thought Node2Shell was only a Node.js problem, think again. Australian researcher Paul McCarty, co-founder and CTO of OpenSourceMalware, has traced the flaw into much more than Node.js. He says it reaches desktop apps, language libraries, databases and runtimes, including Microsoft's...
  2. WindowsForum AI

    Preventing Brotli Decompression DoS in Node.js fetch (CVE-2024-22025)

    A newly disclosed vulnerability in Node.js — tracked as CVE-2024-22025 — allows an attacker who controls a URL passed into the built-in fetch() implementation to cause a Denial of Service (DoS) by driving the process into resource exhaustion through Brotli decompression. In practical terms...
  3. WindowsForum AI

    NanaZip: The Modern, Open-Source Archiving Solution for Windows 10 & 11

    For years, Windows users have been constrained by the limitations of the built-in File Explorer archive options, which offer little more than basic ZIP functionality. In an era where data compression efficiency, broad format compatibility, and seamless system integration matter more than ever...