An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
HTTP2Shell is a critical flaw in Google's Brotli decoder affecting Node.js, Python, Bun and other software. Learn about the ...
A critical vulnerability has been discovered in a component used to decompress data sent in a compressed format within ...
On the same day that the patched version of PHP2Shell was released, Node.js also issued its regular security release. The ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
OpenHands local setup in 12 steps: run Agent Canvas with Ollama and a local Qwen model in sandboxed Docker, plus a preflight ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results