Broccoli2Shell was def a missed opportunity by the folks who coined it Node2Shell since it does go well-beyond node. https://broccoli2shell.com/
Broccoli2ShellBroccoli2Shell: the Brotli decoder bug (CVE-2026-111497)An out-of-bounds write in Google's Brotli decoder reaches Node.js, Python and more. Affected versions, checks and fixes.