#Brotli

Node2Shell: The Silent Danger of Bundled Compression in Node.js and Beyond

Analysis of Node2Shell (CVE-2026-111497), a critical Brotli decoder vulnerability affecting Node.js, Bun, and Python, enabling remote code execution via crafted