importantSYS.SOURCE: Aikido.dev• 2026-10-24T08:06:39Z
CVE-2026-111497: Brotli Vulnerability Expands to HTTP2Shell Affecting Multiple Libraries and Applications
A critical vulnerability (CVE-2026-111497) in the Brotli compression library has expanded from Node2Shell to HTTP2Shell, affecting multiple HTTP-related libraries and applications. Patches are now available for key projects, but urgent upgrades are required to mitigate risks of memory leaks, data exposure, and remote code execution.
*** END OF TRANSMISSION ***