Critical ‘HTTP2Shell’ Brotli vulnerability triggers emergency patches

October 26, 2026 · 4:27 pm 1 sources

Image: BleepingComputer

Coverage

Coverage

• Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
  BleepingComputer · October 26, 2026 16:27
  A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]