Brotli is a lossless compression format and software library that reduces data size for storage or transmission. It is commonly used for web content, where smaller files can save bandwidth and speed delivery. Programs that support Brotli must encode or decode data using the format.
In cyber security, compression code matters because applications may process data supplied by users or remote systems. Bugs in a Brotli implementation could potentially affect availability or, depending on the flaw and how the code is used, create other security risks. In Node.js, Brotli is among the bundled components maintained with the runtime, so its security updates can matter even when application code does not use the library directly. Keep the runtime and dependent software patched, and treat data decompression as input processing that should be covered by appropriate limits and validation.