CSO Online

Node2Shell puts Microsoft and Node.js on Brotli patch duty

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...
kucoin

SlowMist: Udesk Malicious JS Steals Data and Alters Transfer Addresses

How can a single script compromise both user data and transfer funds?Article author and source: SlowMist TechContextRecently, ...
The Dong-a Ilbo

Node.js flaw could let hackers seize server control

A critical security flaw in Node.js could allow hackers to take over servers remotely by sending a single maliciously crafted ...
Cybernews

Google Brotli flaw leaves 90% of the cloud exposed, Wiz finds, as patching scramble continues

New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to ...

소프웨어 실행환경 ‘Node.js’도 보안 취약점 발견

26일 보안업계에 따르면 Node.js 프로젝트는 지난 21일 공식 보안 공지를 통해 Node.js에 포함된 브로틀리 (Brotli) 압축 해제 모듈에서 원격 코드 실행을 허용할 수 있는 취약점 (CVE-2026-111497 ...
El-Balad

Google’s Cve-2026-111497 Brotli flaw reaches Node.js and Bun

CVE-2026-111497 in Google’s Brotli decoder can corrupt memory across Node.js, Bun, Python and Envoy, with code execution ...

What is HTTP2Shell? A Beginner's Guide to the Critical Node.js Vulnerability

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...