Security
A critical Brotli decoder flaw nicknamed HTTP2Shell or Node2Shell can let attackers crash apps or run remote code. Patches are out for Node.js, .NET and Python packages.
Loading…
Search
No phones and 2 stories for “HTTP2Shell”
Security
A critical Brotli decoder flaw nicknamed HTTP2Shell or Node2Shell can let attackers crash apps or run remote code. Patches are out for Node.js, .NET and Python packages.
Security
Aikido warns the Node2Shell flaw is now HTTP2Shell, a Brotli bug tracked as CVE-2026-111497 that affects many HTTP libraries and apps — including Python stacks using brotlicffi.