Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...

The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed ...

Microsoft issued an emergency .NET patch for a critical Brotli flaw called Node2Shell, scored 9.2 CVSS severity.

A vulnerability in Google's Brotli data-compression library could let hackers take control of vulnerable systems, crash ...

HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...

Node.js released emergency patches for three versions to fix a critical Brotli compression library flaw (CVE-2026-111497) ...

As autonomous coding agents like Cursor and Claude Code are fed DB schemas, token consumption is exploding, leading to the ...

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

A significant security vulnerability has been identified in Google's Brotli decoder, impacting various software platforms ...