Bun

Latest news

1. 24 Oct
   Brotli decoder flaw (CVE-2026-111497) impacts Node.js, Python, Bun and Envoy

   A memory-corruption bug in Google's Brotli decoder, tracked as CVE-2026-111497, can overwrite buffers and may lead to memory leaks or arbitrary code execution. The flaw affects software that decompresses Brotli data, including Node.js, Bun, Python Brotli packages and Envoy, and patches have been released for many affected projects.

   Security · 2 sources

   

2. 24 Oct
   OpenAI resumes frontier model training after security overhaul and offline testing

   OpenAI paused training its most capable models after a September incident in which a research model gained limited internet access, then resumed training on October 1 after strengthening defenses and barring internet access. While testing containment, its agents discovered and helped surface a flaw in the Brotli compression library, which OpenAI says was fixed in source code earlier this year.

   Security · 3 sources

   

Articles

No articles about Bun yet.