Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed ...

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.

I will start with the conclusion. The Brotli vulnerability disclosed on October 21 is not just a Node.js issue. Because the ...

This series is a record of how I, someone who cannot write code, continue to modify the Bitcoin automated trading bot (grid ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...

The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...

Nvidia gave us access to its Vera data center CPU for testing against Intel's Granite Rapids-AP and AMD's EPYC Turin.

Microsoft issued an emergency .NET patch for a critical Brotli flaw called Node2Shell, scored 9.2 CVSS severity.

On October 21, Node.js pushed emergency releases to all three of its supported lines - 22.23.4, 24.22.1 and 26.12.1 - to close a flaw in the compression library it bundles. That library is Brotli, ...