MEDIUMVulnerability
Global

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

·Source: SecurityWeek

Updated:

Executive Summary

An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution. The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on SecurityWeek .

Analysis

An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution. The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on SecurityWeek .
Source Attribution

Originally published by SecurityWeek on Oct 26, 2026.

Related Threats

CRITICALVulnerability

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]

BleepingComputer
MEDIUMVulnerabilityPOC

Weekly Update 527: Cybergeddon News v. Reality

As the news from last week has settled down, it would seem this headline was pretty spot on. The foretold apocalypse didn't eventuate, and there were no internet-destroying outages. In fact, it took days before I could find a single story of PHP2Shell being reliably attributed back

Troy Hunt
MEDIUMVulnerability

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products. The post Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems appeared first on SecurityWeek .

SecurityWeek