Progress is there, but it's mending a small part of a large wound.

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

IntroductionThis summary covers PRs merged between October 26 and 27, 2026, across six repositories, including Fluent UI, ...

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

A critical flaw has been discovered in 'Node.js,' which is widely used behind the scenes of web services and applications. It ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

To address a vulnerability in Google's Brotli compression technology that could allow attackers to corrupt process memory, ...

Veracode says the security score for AI-generated code rose from 56% to 62%. Claude Opus 5.5 and GPT-6-Sol tied for the top ...

Once you set up your TV, you likely forget about most of its ports, except for HDMI and USB. If you’re an advanced TV user, ...

One Brotli decompression bug is reachable through Node, .NET, Python, Bun, Envoy and Istio. The patch matrix and what to do ...