Create account

Coverage dated October 26, 2026

Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

Headline from Bleeping Computer

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]

Bleeping Computer's own description from its feed. We collect headlines and these descriptions, not full articles; read the original reporting below.

Read the reports

Reports & sources

3 articles, oldest first.

  1. Bleeping Computer

    Microsoft releases emergency .NET patches for critical Brotli flaw (opens Bleeping Computer)

    Published

    Bleeping Computer's feed description

    Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. [...]

  2. Bleeping Computer

    Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches (opens Bleeping Computer)

    Published

    Bleeping Computer's feed description

    A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]

  3. The Register

    Microsoft releases emergency .NET security fixes for Google Brotli bug (opens The Register)

    Published

    The Register's feed description

    Redmond joins growing list of software maintainers scrambling to patch compression flaw

Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches | Since Then