
CISA lists the OpenAI-reported Brotli flaw Node2Shell as exploited, and honeypots record attack attempts
CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder. Imperva has shown it can lead to code execution on an official Node.js image.






