Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
OpenAI Codex Security researchers reported CVE-2026-111497, a Brotli decoder flaw that prompted patches for Node.js 22.x, 24.x and 26.x.
According to OpenAI and Patch the Planet, a Brotli library bug enables unauthenticated remote code execution via malicious compressed data, prompting ...
Node2Shell exploits a high-severity memory flaw in Node.js’s Brotli decoder to execute attacker-controlled code.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results