# Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

> **Open Intelligence Dossier** · First detected: 2026-10-27 00:00 UTC · Category: Technology

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| Rapid7 | CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder | [Source Link](https://news.google.com/rss/articles/CBMisgFBVV95cUxPQ2V2Yi0tMmxscjhodzZNX0M1OS1acU1wU3VJRDgyVENZeFUxUUE1MlpzTG1QajZEdlc0YkdIbUo4eG81aFF3cEc1cjY1ZkJZamVOc1NMMmJmVllqNE5XS0V6WGgxeTM1OUdFSGZHVEN4VUNoazZ2bFdJajE5Ujh0cDhZU2Vmbi1LZzlfMC1FZWRpZjduN09jeEFlTmR0R3ZQLVN3YTNvaUJYWmVER3FlT0Z3?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-10-27/node2shell-brotli-flaw-triggers-patching-across-microsoft-node-js-python*