Node and Python were feeling left out, so here's an RCE that needs attention. The Node issue, referred to as #Node2Shell, appears fairly exploitable. Check your Node versions and update. Check for affected Python packages as well.
https://ifin.network/t/cve-2026-111497-brotli-out-of-bounds-write-impacts-node-python/929
#ThreatIntel
IFIN - The Independent Federated Intelligence Network
npub1qm…nh363
2026-10-23 18:31:51 UTC
Author Public Key
npub1qm4tytdmranfklywc562p7gprs702mzkc4usqv6t8ja3d340evpslnh363Seen on
wss://relay.momostr.pinkPublished at
2026-10-23 18:31:51 UTCEvent JSON
{
"id": "af1a88c2b4c640449c3d989bd4867097c431b111f11e31b2de59dc34c1d6a1c5",
"pubkey": "06eab22dbb1f669b7c8ec534a0f9011c3cf56c56c57900334b3cbb16c6afcb03",
"created_at": 1792780311,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@ifin/117491650509028642",
"web"
],
[
"t",
"threatintel"
],
[
"t",
"node2shell"
],
[
"proxy",
"https://infosec.exchange/ap/users/115741367687413652/statuses/117491650509028642",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/115741367687413652/statuses/117491650509028642",
"pink.momostr"
],
[
"-"
]
],
"content": "Node and Python were feeling left out, so here's an RCE that needs attention. The Node issue, referred to as #Node2Shell, appears fairly exploitable. Check your Node versions and update. Check for affected Python packages as well.\n\nhttps://ifin.network/t/cve-2026-111497-brotli-out-of-bounds-write-impacts-node-python/929\n\n#ThreatIntel",
"sig": "e979f72e227dcf5f03aa88b05e632e963b68fa9860ed6c236fc1e6e158cc31d2eba8d0864fe57a4132217c337805ba887231c67ea85d3ea20417f7f2f6b096ee"
}