SafeBreach Coverage for the Actively Exploited Brotli RCE Learn how SafeBreach maps CVE-2026-111497 to simulations that test ...

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, Node.js and two Python packages. A vulnerability in Google’s Brotli ...

Use this repository only with the included loopback labs or systems you are explicitly authorized to test. See AUTHORIZED_USE.md. This Express result is profile specific and probabilistic. It depends ...

A high severity vulnerability in Google's Brotli decompression library extends well beyond Node.js into ecosystems such as Python, Go, .NET and Perl, according to researcher Paul McCarty. Affected ...