Node2Shell Brotli Flaw Spreads Past Node.js Into Apps
CVE-2026-111497, called Node2Shell, is an out-of-bounds write in Google's Brotli decoder vendored into Electron apps, .NET, DuckDB and Python packages.…
Part of the
network
network
Author: Staff Writer
LiteLLM Supply Chain Attack Started With an Unrevoked Key
LiteLLM says an unrevoked May master key gave an attacker owner-level GitHub access on October 10, later used to publish…
