The recently publicised high severity vulnerability in a popular Google-developed compression library reaches well beyond the ...

A vulnerability in Brotli decompression has prompted fixes for Node.js, Bun and Envoy. Here are the proof-of-concept ...

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

OpenAI’s open-source security initiative has put out a standalone resource page for CVE-2026-111497, the critical Brotli ...

IntroductionImperva researchers have demonstrated that crafted Brotli data can be used to execute attacker code in ...

OpenAI Codex Security researchers reported CVE-2026-111497, a Brotli decoder flaw that prompted patches for Node.js 22.x, 24.x and 26.x.

Node2Shell exploits a high-severity memory flaw in Node.js’s Brotli decoder to execute attacker-controlled code.

Node.js patched node2shell, CVE-2026-111497, after a Brotli decoder flaw that can trigger crashes, memory leaks, or remote ...

Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...

Node.js has released security updates for its 22.x, 24.x, and 26.x release lines, fixing a total of 10 vulnerabilities. Among the four rated ...