Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
"AWS will surely fix Node.js vulnerabilities for us."When using Lambda, it's easy to think that way.However, with this Brotli ...
Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...
The HTTP2Shell Brotli flaw also impacts .NET, FFmpeg, ClickHouse, and Apache Arrow, so updating Node.js alone may leave other ...
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...
The HTTP2Shell vulnerability in Google's Brotli library threatens Node.js and other software with memory corruption and code execution risks. Here's what to do.
A critical bug in the Brotli decompression code used by Node.js, .NET, Python tools and more is now being attacked.
Craft Anything is an open-source Rust engine that studies any website, app or game and has a coding agent build your own ...
Out-of-band security updates for .NET address the Brotli decoder vulnerability and tarball ownership vulnerability.
Microsoft has released an emergency patch for a critical Brotli decompression flaw affecting multiple .NET versions, warning ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results