🧰 Brotli

The items that name it 22

• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas affected products2026-10-29It is written here as Brotli (compression library, decoder bug fixed in source on February 27, released October 21, 2026).

  compression library, decoder bug fixed in source on February 27, released October 21, 2026

• A quiet week in infosec <.<
  articleas classification.technologies2026-10-29
• The OpenSourceMalware Show #27
  talkas classification.technologies2026-10-29
• Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder
  writeupas classification.technologies2026-10-29
• Trail of Bits (@trailofbits) on X
  threadas classification.technologies2026-10-28
• CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
  articleas classification.technologies2026-10-28
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisoryas classification.technologies2026-10-27
• Node.js Brotli Decoder Out-of-Bounds Write Threatens Remote Code Execution Across All Supported Versions
  advisoryas classification.technologies2026-10-27
• eMudhra, Brotli, and the Long Tail of a Security Fix
  articleas classification.technologies2026-10-26
• Masoud (@dev3mike) on X
  threadas affected products2026-10-26It is written here as Brotli (the fix had been in its source since February but was not released).

  the fix had been in its source since February but was not released

• Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
  articleas classification.technologies2026-10-26
• Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
  advisoryas classification.technologies2026-10-25
• Bye Bye Brotli? Google's Compression Library Is a Security Mess
  articleas classification.technologies2026-10-25
• lee1981 (@lee1981b) on X
  articleas classification.technologies2026-10-25
• Brotlipocalypse
  writeupas classification.technologies2026-10-24
• [AINews] Kimi 3.1 Pro 104BA-2.8T: Fable-5.1-Class Open Weights narrows Closed-AI lead to 1 month... and Pro Highspeed API with 2-3× speed
  articleas classification.technologies2026-10-24
• Trail of Bits (@trailofbits) on X
  toolas classification.technologies2026-10-23
• Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497)
  advisoryas classification.technologies2026-10-23
• Brotli vulnerability affects curl and Git
  advisoryas classification.technologies2026-10-23
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-23
• Python Packages Vulnerable to Node2Shell
  writeupas classification.technologies2026-10-23
• Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
  advisoryas classification.key entities2026-10-22