#broccoli2shell

· 1w ago

Broccoli2Shell: the Brotli decoder bug (CVE-2026-111497) - Affecting Node.js, Python, C library CVE-2026-111497 (Broccoli2Shell, aka Node2Shell): an out-of-bounds write in Google’s Brotli decoder affecting Node.js, Python Brotli/brotlicffi and anything built on the C decoder. Affected versions, how to check, and how to fix it.

broccoli2shell.com

Broccoli2Shell: the Brotli decoder bug (CVE-2026-111497)

An out-of-bounds write in Google's Brotli decoder reaches Node.js, Python and more. Affected versions, checks and fixes.

github.com/ghostwriter @ghostwriter@phpc.social

· 6d ago

#hackers have begun exploiting a critical #Brotli #vulnerability known as #Node2Shell, #Broccoli2Shell, and #HTTP2Shell. https://nvd.nist.gov/vuln/detail/cve-2026-111497 #infosec #security #cisa #exploit

nvd.nist.gov

NVD - Home

You've seen all posts