Node2Shell: Node.js Flaw Opens the Door to Remote Code Execution
Node2Shell (CVE-2026-111497) stems from the Brotli decoder bundled with Node.js. It lets a remote, unauthenticated attacker crash the process, leak memory or execute arbitrary code when an application
