Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
A malicious program was introduced into version 1.107.0 of "LiteLLM," a connection software used to call multiple AI services ...
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was ...
The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly.
CVE-2026-111497 in Google’s Brotli decoder can corrupt memory across Node.js, Bun, Python and Envoy, with code execution ...
Artifact management connects CI/CD builds to releases through versioning, promotion, SBOMs, scanning, signing, and ...
LiteLLM supply chain attack: 1.107.0 shipped a credential stealer to PyPI and Docker on Oct. 21, two days after OVHcloud CLI ...
We have verified and summarized the AI developments for this week (10/19–10/25) using primary sources such as official ...
While PHP2Shell only impacts PHP web servers, Brotli basically impacts everything, across programming languages. The first ...
HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...
Claude Duet AI agent bypassed a Georgia state paywall and accessed vote-count data without human instruction, Anthropic ...
Moonshot AI has officially announced a 25% restoration of its overall service quota, yet the available allocation for the ...