SOCRadar headline says Brotli flaw Node2Shell hits Python packages
Original title: Node2Shell: Brotli Flaw Hits Python Packages
The captured page is site navigation, with no CVE, versions, fix, or exploitation details.
A SOCRadar blog headline says a Brotli flaw called Node2Shell affects Python packages. The text provided with the item is website navigation and product marketing, not the vulnerability write-up. No affected versions, fixed release, CVE, or attack status is stated.
Unconfirmed: Only the headline is available, so impact and exploitation status are unknown.
- The supplied text does not describe how the Brotli flaw works.
- No product version range or patch version is given.
- PHP2Shell and wp2shell mentions appear only in site menus, not as this story.
- Organizations
- SOCRadar
From the original article
11 min read at socradar.io
The Node2Shell Brotli flaw (CVE-2026-111497), disclosed alongside Node. js fixes on October 21, 2026, also reaches Python through the PyPI Brotli and brotlicffi packages. Both compile Google’s vulnerable Brotli C decoder, and popular HTTP clients such as requests, httpx and aiohttp use them to decompress responses automatically once they are installed.
By Yağmur Ernalbant · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.