#brotli

Exposed Node.js services and CVE-2026-111497: reading a five-million-asset signal...

PHP has released rebuilt official Windows packages for PHP 8.2 through 8.5 to resolve CVE-2026-111497 in the Brotli compression library. The memory corrupt

Introduction: The Critical HTTP2Shell Vulnerability in Python Servers If you’re running a...

OpenAI will conduct frontier model training without live internet access after safety evaluations. Recent red-teaming uncovered software issues including a

CVE-2026-111497 is a memory-corruption flaw in Google’s Brotli decoder, affecting projects including Node.js, Bun, Envoy and Python Brotli packages. Imperv

Imperva's researchers ran attacker-supplied code on an official Node.js 24.22.0 image for Linux...

Introduction The Node2Shell vulnerability, initially confined to Node.js environments,...

Node.js' October 21 security release fixes 10 flaws across 22.x, 24.x and 26.x. The most serious is an out-of-bounds write in the bundled Brotli decoder th

An eight-byte buffer and a permanent error: engineering lessons from CVE-2026-111497 The...

Patch decision brief: triaging CVE-2026-111497 across Node.js 22, 24 and 26 Most...

The Node.js CVE nobody owns: CVE-2026-111497 and the vendored Brotli problem Security work...

Where CVE-2026-111497 actually bites: decompression paths in Node.js services A...