Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
A vulnerability with the ominous name 'HTTP2Shell' is currently a hot topic. Its severity is 9.2 out of 10 (CVSS 4.0). It is ...
To address a vulnerability in Google's Brotli compression technology that could allow attackers to corrupt process memory, ...
13hon MSN
Govt issues warning over Google bug that can expose systems to cyberattacks: Who is at risk?
A significant security vulnerability has been identified in Google's Brotli decoder, impacting various software platforms ...
Node.js says the Brotli decoder ‘kept appending input bytes to an eight-byte internal buffer’. Microsoft has now patched .NET ...
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...
The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...
New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...
The memory-corruption vulnerability can expose sensitive data and, according to Node.js, potentially enable remote code ...
Moderators of Reddit's r/opensource community, dedicated to open-source software, have introduced new rules that, among other ...
The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1 ...
ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results