Node2Shell Isn't Just Node: Patch the Brotli RCE (CVE-2026-111497) in Python, Django and Every Runtime You Ship

On October 27, 2026, CISA added CVE-2026-111497 to its Known Exploited Vulnerabilities catalog. The bug has collected three nicknames in a week (Node2Shell, HTTP2Shell and Broccoli2Shell), and most of