A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

A vulnerability in Brotli decompression has prompted fixes for Node.js, Bun and Envoy. Here are the proof-of-concept ...

Every time you log into a banking portal, book a medical appointment, or submit a government form online, you are trusting a ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.