Microsoft ships emergency .NET fixes for a critical Brotli flaw

Microsoft released urgent security updates for .NET, Visual Studio, and PowerShell to fix a critical buffer overflow vulnerability in the Brotli compression library, reported by OpenAI's Codex Security team. The flaw, affecting multiple Brotli versions, could allow attackers to read or corrupt memory, leading to serious security risks. Node.js, Python packages, and other tools using Brotli have also issued fixes.