The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Cybernews

eMudhra quits issuing trust certificates after blunder triggers Java and Python updates

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...
El-Balad

Google’s Cve-2026-111497 Brotli flaw reaches Node.js and Bun

CVE-2026-111497 in Google’s Brotli decoder can corrupt memory across Node.js, Bun, Python and Envoy, with code execution ...
Cyber Security News

Node2Shell Vulnerability Actively Exploited in the Wild, CISA Warns

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...

The specification is only 3 lines long. Yet it doesn't work — Calling a local app from a browser extension

Browser extensions live inside a box.They can touch the page's DOM. They can peek at network traffic. They can have storage. But they cannot "launch an app installed on this PC." That would be a major ...
Cybernews

PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...
cyberkendra.com

Node2Shell Exploited in the Wild: Node.js Brotli RCE

ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...