Node2Shell CVE-2026-111497 Brotli Content-Encoding Request to Node.js/Bun

Suraj A@cytech

•updated yesterday•3•0•16

Detects HTTP requests carrying a Brotli Content-Encoding request body, which serves as the delivery vector for Node2Shell (CVE-2026-111497), an out-of-bounds write vulnerability in the Brotli decoder bundled with Node.js and Bun.