The HTTP2Shell Brotli flaw has prompted emergency security updates across several software ecosystems. Tracked as CVE-2026-111497, the vulnerability can cause crashes, expose sensitive memory and potentially allow remote code execution when applications decompress malicious data. Researchers initially identified the issue in Node.js before finding broader exposure in the underlying Brotli decoder. Consequently, the vulnerability also…