Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.
Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled data.
A JavaScript library that encodes JavaScript code into invisible Unicode characters, making it appear as empty or whitespace while preserving full functionality. The JavaScript code is converted to ...
IntroductionImperva researchers have demonstrated that crafted Brotli data can be used to execute attacker code in applications running on official Node.js builds. The proof-of-concept (PoC) is named ...
In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results