Tag: node2shell

Node.js Flaw Exploited via Crafted Brotli Data

Security researchers at Imperva have discovered a vulnerability in Node.js, dubbed Node2Shell, which allows attackers to run malicious code by feeding crafted Brotli data to the runtime's decoder, putting systems at risk. This flaw, tracked as CVE-2026-111497, was successfully exploited on a standard Node.js image, but has since been patched in version 24.22.1.