Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...
New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...
Node.js says the Brotli decoder ‘kept appending input bytes to an eight-byte internal buffer’. Microsoft has now patched .NET ...
The HTTP2Shell Brotli flaw also impacts .NET, FFmpeg, ClickHouse, and Apache Arrow, so updating Node.js alone may leave other vulnerable applications exposed.
HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...
The recently publicised high severity vulnerability in a popular Google-developed compression library reaches well beyond the ...
Node.js released emergency patches for three versions to fix a critical Brotli compression library flaw (CVE-2026-111497) ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results