Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...
Imperva demonstrated code execution via crafted Brotli data on an official Node.js 24.22.0 Linux arm64 image; Node.js has ...
Quantum error correction decoder upgrade backfires: a new arXiv preprint from Leiden University and Riverlane shows that ...
IntroductionImperva researchers have demonstrated that crafted Brotli data can be used to execute attacker code in ...