HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Just as domestic services were shutting down one after another due to a critical PHP vulnerability, Node.js also released a security fix on the same day.Python also released a fixed version at the ...
Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...
An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
CVE-2026-111497 in Google’s Brotli decoder can corrupt memory across Node.js, Bun, Python and Envoy, with code execution ...