Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#Brotli

1 articles

Deep Dive

Node2Shell: Brotli RCE in Node.js, Bun and Python (CVE-2026-111497)

A decoder overflow rated CVSS v4.0 9.2, CVE-2026-111497 affects Node.js, Bun, .NET, the Python Brotli packages, Envoy and Istio; fixes shipped October 21 to 25, 2026.

Ostorlab Team
Oct 25, 2026