Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

A vulnerability has been discovered in the decompression process of Brotli (a compression format commonly used on the web) ...

New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...

What you will learn in this article] The mechanism and root cause of Node2Shell (CVE-2026-111497) Why the impact spread ...

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...

CISA added Node2Shell (CVE-2026-111497) to KEV as ELLIO and Previdian logged exploitation attempts and Broadcom flagged ...

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...

To address a vulnerability in Google's Brotli compression technology that could allow attackers to corrupt process memory, ...

There are a jaw-dropping 5.35 billion internet users around the world. But you’d be surprised how many people are not aware ...

Claude formally proved security properties in the compiled code of 123 open-source libraries. Along the way, it found bugs ...

Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it's unlikely to be the last major software scare.