SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

94% of top PyPI packages feature native Windows on Arm support

Anaconda now hosts 2,500 Arm packages, while NumPy and SciPy publish native wheels to aid data scientists migrating off ...
Boston University

Python Packages

The “pip” command with the “list” method will print a list of all centrally and locally installed PyPI packages and their versions. Because most of our packages are installed this way, this is the ...

A Critical Vulnerability in PHP. So, Is Python Safe? Thinking About the 'Free and Easy' Side and the Value of Commercial Software

The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...
The Hacker News

LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release

Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...