Tag: Node.js security update
HTTP2Shell: How the Node.js Brotli Bug Spread to Python, Bun, Envoy and More
Node2Shell grew into HTTP2Shell: the same Brotli decoder bug (CVE-2026-111497) reaches Python HTTP clients, Bun, Envoy, Istio and curl. Who is exposed, how to check in one minute, and the fixed versions.
Read more →
Node2Shell Explained: The Node.js Brotli Bug (CVE-2026-111497) and How to Patch It
A critical bug in the Brotli decoder built into Node.js lets attackers corrupt server memory without logging in. What it is, who is affected, and a live patch on a real Ubuntu server.
Read more →