CERT24Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js and Python PackagesLoading data…
CERT24Threat Observatory
Period

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js and Python Packages

A vulnerability in Google’s Brotli data compression library, CVE-2026-111497, affects Brotli versions 1.0.3 through 1.2.0. The flaw is an out-of-bounds write, and Google assigned it a CVSS v4 score of 9.2. Fixes have been released for, among others, Node.js, Microsoft .NET, Visual Studio, PowerShell, and the Python Brotli and brotlicffi packages.

← Back to intelligence

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js and Python Packages

A vulnerability in Google’s Brotli data compression library, CVE-2026-111497, affects Brotli versions 1.0.3 through 1.2.0. The flaw is an out-of-bounds write, and Google assigned it a CVSS v4 score of 9.2. Fixes have been released for, among others, Node.js, Microsoft .NET, Visual Studio, PowerShell, and the Python Brotli and brotlicffi packages.