Node and Python were feeling left out, so here's an RCE that needs attention. The Node issue, referred to as #Node2Shell, appears fairly exploitable. Check your Node versions and update. Check for affected Python packages as well.
https://ifin.network/t/cve-2026-111497-brotli-out-of-bounds-write-impacts-node-python/929
IFINCVE-2026-111497: Brotli Out-of-Bounds Write Impacts Node, PythonLast Updated: 2026-10-23T15:39:23Z (UTC) CVSSv4: N/A On 2026-10-21T07:00:00Z (UTC) NodeJS patched a High severity vulnerability in the runtime involving the Brotli compression decoder. The vulnerability was a buffer overflow that could lead to remote code execution. On 2026-10-22T07:00:00Z (UTC), Imperva published a report demonstrating the remote code execution. Notably, Node was vulnerable in