Patch Brotli 1.2.1 Now: CVE-2026-111497 Hits Python, Node, Envoy
CVE-2026-111497 (CVSS 4.0: 9.2) is a Brotli decoder out-of-bounds write. Fixed in Brotli 1.2.1 and brotlicffi 1.2.1.0, but pip-audit won't flag it yet.
4 posts
CVE-2026-111497 (CVSS 4.0: 9.2) is a Brotli decoder out-of-bounds write. Fixed in Brotli 1.2.1 and brotlicffi 1.2.1.0, but pip-audit won't flag it yet.
Microsoft Agent Framework's new Harness collapses planning, memory, compaction, and approvals into one call in Python and .NET.
Microsoft Agent Framework ships a batteries-included harness: chat-history persistence after every model call, plan/execute modes, approval, and telemetry — resumable by default.
Microsoft Agent Framework now backs agents with GitHub Copilot SDK, shipping shell execution, file ops, and MCP integration in stable C# and Python SDKs.