Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...

The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed ...

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

Modern medical and salon IT infrastructure, including web booking systems for clinics and salons, medical interview forms, ...

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

Node.js released emergency patches for three versions to fix a critical Brotli compression library flaw (CVE-2026-111497) ...

On October 30, 2026, Visual Studio has released a fix via CVE-2026-118147. Affected versions include Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.11, Microsoft ...

Nvidia gave us access to its Vera data center CPU for testing against Intel's Granite Rapids-AP and AMD's EPYC Turin.

Microsoft issued an emergency .NET patch for a critical Brotli flaw called Node2Shell, scored 9.2 CVSS severity.