SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

The Java, Node.js, Go, and Python certificate issue was one single event. eMudhra's key collapse and the order of this week's updates

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt ...

Following a critical PHP vulnerability, Node.js also releases a fix. What is happening now, and how to check your PHP, Node.js, and Python versions to …

Just as domestic services were shutting down one after another due to a critical PHP vulnerability, Node.js also released a ...
Cyber Security News

October 21 Cybersecurity Nightmare: PHP and Node.js Flaws, LiteLLM Backdoor, and Active Attacks

October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...
Cybernews

eMudhra quits issuing trust certificates after blunder triggers Java and Python updates

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...
SecurityWeek

PHP2Shell Exploitation Moves From Probes to Working Shells

Honeypot data shows attackers successfully exploiting the PHP2Shell vulnerabilities to execute shell commands on PHP servers.
Crypto Briefing

OpenAI uncovers remote code execution flaw in Brotli compression library

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.