Brotli

Reported Context (6)

A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Brotli Flaw Affects Node.js, Bun, Python Packages and Envoy; RCE Shown on One Node.js Build
Node.js has released security updates addressing CVE-2026-111497, a high-severity vulnerability in its bundled Brotli decompression code that can potentially enable remote code execution. Node.js Patches Brotli Flaw That Could Enable Remote Code Execution
Node2Shell ain’t just a Node.js bug: the PyPI Brotli and brotlicffi packages ship the same vulnerable C decoder. Node2Shell Vulnerability Also Affects Python Brotli Packages
⚠️ Brotli is a widely used compression library from Google. On Wednesday, October 21st NodeJS disclosed CVE-2026-111497, dubbed “node2shell,” wherein a Node.js process that decompresses attacker-controlled Brotli data Brotli CVE-2026-111497 Affects Python and HTTP Libraries
its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning Node.js Updates Fix Brotli Decoder Flaw That Could Enable Remote Code Execution

CVE (5)

People (4)

MITRE ATT&CK (2)

Vendors (3)

Products (12)

Tools (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.