SecurityWeek

Node2Shell Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
heise online

Python closes critical TLS flaw tied to eMudhra keys in update

Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 fix a critical vulnerability caused by compromised eMudhra certificates, ...