An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.

The experimental just-in-time compiler is being removed from CPython over concerns about maintenance, compatibility, and ...

A critical vulnerability in Google's Brotli compression library could enable crashes, data exposure or system compromise.

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...

Learn top Web3 career paths, skills, and course topics for smart contract dev, protocol engineer, dApp developer, data roles, ...

ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...

Datadog says a fix has been deployed for elevated errors affecting Workflow Automation, App Builder, Bits Code and Bits Agent ...

The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

CVE-2026-111497 in Google’s Brotli decoder can corrupt memory across Node.js, Bun, Python and Envoy, with code execution ...