Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...
A critical flaw has been discovered in 'Node.js,' which is widely used behind the scenes of web services and applications. It ...
An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
Multiple tech companies and projects have recently pushed patches for a vulnerability called "HTTP2Shell" which could enable remote code execution (RCE) attacks, similar to the recent "PHP2Shell" ...
ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...
New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...
The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Cloudflare announced an emergency update to its Cloudflare Managed Ruleset, adding two web application firewall rules for the ...
HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...
A vulnerability in Brotli decompression has prompted fixes for Node.js, Bun and Envoy. Here are the proof-of-concept ...
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...