Search/Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

● News

Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]

View graph Watch Export

Read original article

Source

bleepingcomputer.com

Published

Oct 26, 2026

Mentions

6

language: en

Connections

8 relationships

CVE-2026-111497

CVSS 9.8Debian, Microsoft, 7-zip, Nodejs, Envoyproxy

Oct 22, 2026extracted