SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
innovatopia

Node.js、Brotliデコーダの脆弱性を修正 本体はGoogleのライブラリで ...

Node.jsは10月21日、同梱のBrotliデコーダの範囲外書き込み（CVE-2026-111497）を修正しました。遠隔からのコード実行につながりうる欠陥で、本体はGoogleのBrotliです。PythonやDebianにも更新が及び、Deb ...

Brotli decoder flaw affects Bun, Python and more — not just Node.js

The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...
CSO Online

Node2Shell puts Microsoft and Node.js on Brotli patch duty

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...
GitHub

Polar Codes Decoder Suite - Python Simulation And Decoding Toolkit

Polar Codes Decoder Suite is a practical Python collection for constructing, encoding, transmitting, decoding, and evaluating polar codes. It brings together successive cancellation decoders, list ...