Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
What happenedI saw "CVE-2026-111497" at the top of the trending list on note, and honestly, I opened it wondering what kind ...
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...
New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...
What you will learn in this article] The mechanism and root cause of Node2Shell (CVE-2026-111497) Why the impact spread ...
HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...
CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...
To address a vulnerability in Google's Brotli compression technology that could allow attackers to corrupt process memory, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results