Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
4d
HTTP2Shell: I found 7 instances on my Mac. The most dangerous one was the Claude Code binary itself.
A vulnerability has been discovered in the decompression process of Brotli (a compression format commonly used on the web) ...
New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...
What you will learn in this article] The mechanism and root cause of Node2Shell (CVE-2026-111497) Why the impact spread ...
CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...
CISA added Node2Shell (CVE-2026-111497) to KEV as ELLIO and Previdian logged exploitation attempts and Broadcom flagged ...
To address a vulnerability in Google's Brotli compression technology that could allow attackers to corrupt process memory, ...
Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it's unlikely to be the last major software scare.
The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results