What happenedI saw "CVE-2026-111497" at the top of the trending list on note, and honestly, I opened it wondering what kind ...

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

A vulnerability has been discovered in the decompression process of Brotli (a compression format commonly used on the web) ...

New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...

To address a vulnerability in Google's Brotli compression technology that could allow attackers to corrupt process memory, ...

CISA added Node2Shell (CVE-2026-111497) to KEV as ELLIO and Previdian logged exploitation attempts and Broadcom flagged ...

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.

Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it's unlikely to be the last major software scare.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...