Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

A vulnerability has been discovered in the decompression process of Brotli (a compression format commonly used on the web) ...

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...

ML Drift open source release puts Google's battle-tested on-device GPU inference engine -- already running YouTube Shorts at 40% lower frame latency, Google Photos 2 seconds faster, and Snapchat at 30 ...

Node2Shell exploits a high-severity memory flaw in Node.js’s Brotli decoder to execute attacker-controlled code.

Binary quadrature encoding now offers a better balance between computational cost and efficiency than previous methods when ...

Can two labs reliably share entangled states despite channel noise, and if so, how much information must be sacrificed in ...

ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...

That cryptic DLL error is basically your app yelling, “Has anyone seen Dave?!” ...

Imperva demonstrated code execution via crafted Brotli data on an official Node.js 24.22.0 Linux arm64 image; Node.js has ...

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...

A vulnerability in Brotli decompression has prompted fixes for Node.js, Bun and Envoy. Here are the proof-of-concept ...