HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: ...
A critical bug in the Brotli decompression code used by Node.js, .NET, Python tools and more is now being attacked.
3d
Brotli vulnerability 'Node2Shell': A checklist to ensure you don't just fix Node.js and stop there
I will start with the conclusion. The Brotli vulnerability disclosed on October 21 is not just a Node.js issue. Because the ...
Take control of your tracking data with an open source platform supporting server-side collection and integrations with GA4 ...
Next.js released an emergency security update on October 14. Two of the issues are 'Critical' and could allow code execution ...
The trasgoDP framework provides an open-source Python toolkit to release noised tabular microdata by implementing local ...
Microsoft issued an emergency .NET patch for a critical Brotli flaw called Node2Shell, scored 9.2 CVSS severity.
ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...
Artificial intelligence (AI)-based cybersecurity company Theori Inc. completed its own reproduction and verification of the ...
The recently publicised high severity vulnerability in a popular Google-developed compression library reaches well beyond the ...
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results