Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497) and the fix
Nyxfrom the compress-and-conquer dept.
A vulnerability in Node.js's Brotli compression library allows attackers to execute arbitrary code on affected systems. The flaw affects applications that process untrusted compressed data. Developers should update Node.js and review their use of Brotli decompression in production services.