October 27, 2026

The Node2Shell vulnerability is a high-severity flaw in Node.js, tracked as CVE-2026-111497. It lives in the Brotli decompression code bundled with the runtime. A malformed Brotli payload can crash a