> Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder

[SOURCE] Datadog Security Labs [DATE: 29/10/2026 00:00] [LANGUAGE: EN]

We reproduced CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js and other runtimes, and explain how to detect and remediate it.

[messages.read_original_source] →