Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
Summary of this articleHTTP2Shell is a critical vulnerability in the data compression technology "Brotli" that may affect applications and web servers using Node.js and Python. Response is primarily ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results