Brotli bug reaches far beyond Node.js (CVE-2026-111497)

T2High 40Covered by 1 source · first reported by Help Net Security at 27 Oct, 17:38 UTC

A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as “Node2Shell”, “Broccoli2Shell” and “Brotli2Shell”, CVE-2026-111497 is a remotely exploitable out-of-bounds write flaw that…