SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

It is on your PC too. Do not ignore vulnerabilities in PHP, Node.js, and Python

I will start with the conclusion.Right now, I want you to check the versions of 'Node.js', 'Next.js', and 'Python' on your PC ...

CSIRT Work Memo | Scared of the Vulnerability Rush! A Summary of Checkpoints for PHP, GitLab, Java, and Python

Hello everyone! This is Hatchobori-chan.From yesterday to today, various vulnerability reports have been flying in.GitLab, ...