Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

Source: BleepingComputer

Published Oct 26, 2026 (UTC)

Read original source

At a glance

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]