Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...

Microsoft Edge exploit chain combines five bugs and two Windows features to bypass the browser sandbox and execute code .

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix TLS verification bypasses, a Brotli decoder bug and a repeated-random-value issue in ...

CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

Node2Shell exploits a high-severity memory flaw in Node.js’s Brotli decoder to execute attacker-controlled code.

Imperva demonstrated code execution via crafted Brotli data on an official Node.js 24.22.0 Linux arm64 image; Node.js has ...

Cursor says a modified Claude Code 2.1.313 was on its marketplace for about 11 hours, reaching at most 5,000 users. The SSH ...

A critical flaw has been discovered in 'Node.js,' which is widely used behind the scenes of web services and applications. It ...

How can a single script compromise both user data and transfer funds?Article author and source: SlowMist TechContextRecently, ...