Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
Teaser from the source
An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution. The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Node2Shell
Other advisories
- CriticalCVE-2026-111497Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
- CriticalCVE-2026-111497Out-of-bounds write in the brotlicffi decoder ("Node2Shell") also affects the PyPI Brotli package
- CriticalCVE-2026-111497Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
- CriticalCVE-2026-106071Node2Shell / HTTP2Shell: Brotli RCE (CVE-2026-111497) in Node.js, Python, Envoy and Istio + Node.js October releases
Other news entries
- Node2Shell puts Microsoft and Node.js on Brotli patch dutyNewsCSO Online
- Microsoft releases emergency .NET patches for critical Brotli flawNewsBleepingComputer
- Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli DataNewsThe Hacker News
- Brotli-Decoder-Lücke nicht nur in Node.js, sondern auch in Bun, Python und mehrNewsheise Security
ID