node2shell-scanner

node2shell-scanner A command-line tool for detecting CVE-2026-111497 in Node.js HTTP applications. How It Works The scanner sends four one-byte controls to learn how the endpoint handles valid Brotli JSON, malformed Brotli, requests without a JSON content type, and unsupported encodings. It then...

checkmk_broccoli2shell

checkmkbroccoli2shell A Checkmk extension that shows, for every Brotli decoder on a Linux host, whether it is affected by Broccoli2Shell - CVE-2026-111497 , an out-of-bounds write in Google's C Brotli decoder that can lead to remote code execution when a program decompresses Brotli data from an...

Brotli-Node.js-CVE-2026-111497-Broccoli2Shell-Node2Shell-HTTP2Shell-

CVE-2026-111497: Google Brotli 디코더 Block-Switch 반환값 미검사로 인한 Out-of-Bounds Write Node2Shell / HTTP2Shell / Broccoli2Shell -9.8-red Last verified: 2026-11-04 KST. Each figure is listed only if confirmed from the sources in the References below; where values differ between sources, all are listed...

cve-2026-111497-wordpress-poc

CVE-2026-111497: pinned WordPress image RCE PoC This source-only PoC reproduces unauthenticated command execution against one pinned Docker Official Image for WordPress. One pingback.ping request makes WordPress fetch an attacker URL twice during the same PHP request. The first response corrupts ...

ClickHouse Server - Brotli v1.2.0 Decoder DoS/OOB-Write

ClickHouse Server contains a remote code execution vulnerability caused by improper access control, letting unauthenticated users with network access execute arbitrary code remotely, exploit requires network access. id: CVE-2026-116366 info: name: ClickHouse Server - Brotli v1.2.0 Decoder...

brotli-checker

Brotli Checker Brotli Checker finds copies of the Brotli decoder that may need an update for CVE-2026-111497. Install it as a Claude Code or Codex skill, then ask it to check your project. The skill scans source, dependencies, app packages, and unpacked container filesystems. It checks source...

brotli-cve-check

brotli-cve-check Scans a project or container image for CVE-2026-111497 , a buffer overflow in the Brotli decoder. It rates the criticality as Critical, High, or Medium and lists the steps to fix it. The repo ships two pieces: Script skills/brotli-cve-check/scripts/brotlicheck.py: does the actual...

python313-Brotli-1.2.1-1.1 on GA media (moderate)

python313-Brotli-1.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:12305-1 Rating: moderate Cross-References: CVE-2026-111497 CVSS scores: CVE-2026-111497 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-111497 SUSE : 9.2...

CVE-2026-111497

CVE-2026-111497 — Node2Shell -red?style=for-the-badge -orange?style=for-the-badge&logo=nodedotjs&logoColor=white Comprehensive Security Advisory, Technical Analysis, and Remediation Guide for CVE-2026-111497 --- 📋 Table of Contents Executive Summary Technical Deep Dive Root Cause Analysis Attack...

Exploit for Unchecked Return Value in Google Brotli

CVE-2026-111497 Scanner Node.js Brotli Decoder Out-of-Bound...

Exploit for Unchecked Return Value in Google Brotli

CVE-2026-111497 Node2Shell Express body-parser Brotli DoS +...

CVE-2026-128242

actix-http before 3.20.1 and actix-web before 4.18.2 contain an unbounded decompression vulnerability in encoding::Decoder that lets remote attackers exhaust memory and CPU via compressed bodies. Attackers can send small highly compressed gzip, deflate, Brotli or zstd request bodies to Json, Form...

CVE-2026-128014

The FrankenPHP standalone static binaries versions 1.8.0 before 1.13.2 are vulnerable to an out-of-bounds write due to a statically linked Brotli 1.2.0 decoder (CVE-2026-111497). Unauthenticated remote attackers can provide crafted data to applications calling brotli_uncompress_add() , potentiall...

CVE-2026-128014 FrankenPHP 1.8.0 before 1.13.2 Out-of-Bounds Write via Bundled Brotli Decoder

FrankenPHP standalone static binaries 1.8.0 before 1.13.2 bundle the PHP brotli extension statically linked with Brotli 1.2.0, whose decoder contains an out-of-bounds write CVE-2026-111497. Unauthenticated remote attackers can send crafted data to applications that pass it to brotliuncompressadd ...

CVE-2026-128242 actix-http before 3.20.1 and actix-web before 4.18.2 Decompression Bomb DoS via encoding::Decoder

actix-http before 3.20.1 and actix-web before 4.18.2 contain an unbounded decompression vulnerability in encoding::Decoder that lets remote attackers exhaust memory and CPU via compressed bodies. Attackers can send small highly compressed gzip, deflate, Brotli or zstd request bodies to Json, Form...

CVE-2026-128242 actix-http before 3.20.1 and actix-web before 4.18.2 Decompression Bomb DoS via encoding::Decoder

actix-http before 3.20.1 and actix-web before 4.18.2 contain an unbounded decompression vulnerability in encoding::Decoder that lets remote attackers exhaust memory and CPU via compressed bodies. Attackers can send small highly compressed gzip, deflate, Brotli or zstd request bodies to Json, Form...

EUVD-2026-125050

actix-http before 3.20.1 and actix-web before 4.18.2 contain an unbounded decompression vulnerability in encoding::Decoder that lets remote attackers exhaust memory and CPU via compressed bodies. Attackers can send small highly compressed gzip, deflate, Brotli or zstd request bodies to Json, Form...

CVE-2026-128242

The actix-http (before 3.20.1) and actix-web (before 4.18.2) libraries contain an unbounded decompression vulnerability in the encoding::Decoder component. A remote attacker can trigger a Denial of Service (DoS) by sending small, highly compressed request bodies using gzip, deflate, Brotli, or zs...

About the security content of tvOS 27.2.1

Download JSON About the security content of tvOS 27.2.1 This document describes the security content of tvOS 27.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

PT-2026-146503

Name of the Vulnerable Software and Affected Versions FrankenPHP versions 1.8.0 through 1.13.1 Description Standalone static binaries bundle the PHP brotli extension statically linked with Brotli 1.2.0. The decoder in this version contains an out-of-bounds write, which occurs when an...