Er is een kwetsbaarheid (CVE-2026-111497) gevonden in de Brotli-decompressiebibliotheek van Google, die o.a. wordt gebruikt ...

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

The Node.js Brotli vulnerability and the issue surrounding the intermediate certificates of the certificate authority eMudhra ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...

Het Nationaal Cyber Security Centrum (NCSC) waarschuwt beheerders en organisaties om een kwetsbaarheid in de Google Brotli-decoder in Node.js zo snel mogelijk te patchen. Via het beveiligingslek ( CVE ...

ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...

Node2Shell exploits a high-severity memory flaw in Node.js’s Brotli decoder to execute attacker-controlled code.

PKCERT warns organizations of critical Node.js security flaws. Update immediately to prevent remote code execution and data ...