{"schema":"sb.node.v1","id":"sb:e/0972b15ec1070dc7f44a14b5","kind":"entity","label":{"text":"brotli","locale":"en"},"identity":{"anchor":"label:en:brotli","strength":"label"},"asOf":{"knowledgeCutoff":"2026-11-08T17:19:01.455836+00:00","releaseId":"sb-dfe17ada7ff3","snapshot":"deploy b88a7458806c75cf75a89917eff5f731c72e971f"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":28,"separatePublishers":11,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim","receiptsOnTopic":{"state":"measured","share":0.5,"named":14,"of":28,"basis":"documents whose own title or summary lead names the subject, over every counted document that mentions it anywhere (the entity graph's measurement); receipts are drawn only from rows whose own title or URL names the subject (the entity graph's subject gate)"}},"admission":{"state":"provisional","kind":"observed","kindBasis":"no-vocabulary-row","policy":"promotion (observed tier; not promoted)","reason":"seen recurring in the corpus and kept in the graph at the observation bar; not promoted into the vocabulary"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-10-20","to":"2026-11-06","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","share":0,"blind":["0% of mentions say something specific about it; the rest only name it"]}},"dimensions":{"domains":["cybersecurity"],"activeDays":13,"assertions":{}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":10,"byKind":{"observation":10},"items":[{"id":"sb:o/9953734727d962f50fcde6d0","kind":"observation","label":"The Hacker News · 2026-10-28 · Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges","url":"https://thehackernews.com/2026/10/adobe-commerce-polyshell-attacks-breach.html","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/91073fa9b303acafaa55aeff","kind":"observation","label":"Help Net Security · 2026-10-27 · Brotli bug reaches far beyond Node.js (CVE-2026-111497)","url":"https://www.helpnetsecurity.com/2026/10/27/node2shell-broccoli2shell-vulnerability-cve-2026-111497/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/9727fb3b62a67ba15db73899","kind":"observation","label":"The Hacker News · 2026-10-26 · PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw","url":"https://thehackernews.com/2026/10/php-issues-second-windows-security.html","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/306703a63928cc368d941bb1","kind":"observation","label":"GIGAZINE · 2026-10-26 · OpenAIがNode.jsやBunで使われているGoogle製圧縮ツール「Brotli」でリモートコード実行につながる脆弱性を発見","url":"https://gigazine.net/news/20261026-openai-brotli-vulnerability/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/5411af1ea45685e9841da261","kind":"observation","label":"SecurityWeek · 2026-10-26 · Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages","url":"https://www.securityweek.com/node2shell-brotli-flaw-triggers-patching-across-microsoft-node-js-python-packages/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/06aca01b6fdcfa5b993b8dc0","kind":"observation","label":"The Register · 2026-10-26 · Microsoft releases emergency .NET security fixes for Google Brotli bug","url":"https://www.theregister.com/security/2026/10/26/microsoft-releases-emergency-net-security-fixes-for-google-brotli-bug/5305515","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/8e53d10bca127ea9124725d8","kind":"observation","label":"BleepingComputer · 2026-10-26 · Microsoft releases emergency .NET patches for critical Brotli flaw","url":"https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-net-patches-for-critical-brotli-flaw/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/4ab4b570ff0fcda4af16f7e7","kind":"observation","label":"BleepingComputer · 2026-10-26 · Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches","url":"https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/215cd2e743149b9cc3268890","kind":"observation","label":"The Hacker News · 2026-10-24 · Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software","url":"https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/e094c411037e3f4cb2904d5f","kind":"observation","label":"The Hacker News · 2026-10-22 · Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions","url":"https://thehackernews.com/2026/10/nodejs-brotli-decoder-bug-could-allow.html","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}}],"cursor":null,"order":"newest first; we keep the 10 newest receipts for this entity whose own title or URL (the entity graph's subject gate) names it; each says which in match. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":10,"byKind":{"co-mentioned":10},"items":[{"kind":"relation","label":"co-mentioned with node.js (21 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/f972dfeb5931db9b84d251a0"},{"kind":"relation","label":"co-mentioned with node2shell (18 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/83d6834e85f9047ab8878d9d"},{"kind":"relation","label":"co-mentioned with remote code execution (18 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/5c8fc5c6cb02871ff22ccfbc"},{"kind":"relation","label":"co-mentioned with google (17 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/e0cd59a99055a541f8d2f68c"},{"kind":"relation","label":"co-mentioned with python (16 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/f205082ab7e5cec10364f8ff"},{"kind":"relation","label":"co-mentioned with cve-2026-111497 (15 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/51c698ef3e1894a3063fbbb5"},{"kind":"relation","label":"co-mentioned with openai (13 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/a8435ca05a787ab254e0ff74"},{"kind":"relation","label":"co-mentioned with cvss (12 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/29fdb415fd9f6b0a2a5e9cfa"},{"kind":"relation","label":"co-mentioned with http2shell (12 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/59188ee97c286a79a816e693"},{"kind":"relation","label":"co-mentioned with php2shell (11 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/0d635b704ef5b174ea444d71"}],"cursor":null,"order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/0972b15ec1070dc7f44a14b5","mcp":"traverse {\"id\":\"sb:e/0972b15ec1070dc7f44a14b5\"}","page":"/entity/brotli/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/0972b15ec1070dc7f44a14b5\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/0972b15ec1070dc7f44a14b5\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"free-record","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/0972b15ec1070dc7f44a14b5\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"free-record","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/0972b15ec1070dc7f44a14b5\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"free-record","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history, which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"free-record","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"free-record","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"watch","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"watch","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"watch","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"watch","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"one-time-read","reason":"one-time Reads are not offered through this door; use ask"}]}