Tag: supply chain

Node2Shell Brotli Flaw Spreads Past Node.js Into Apps

CVE-2026-111497, called Node2Shell, is an out-of-bounds write in Google's Brotli decoder vendored into Electron apps, .NET, DuckDB and Python packages.…