Broccoli2shell

Trends

1
Critical Brotli Decoder Vulnerability Draws Security Attention●cve-2026-111497GgoogleGB200just now
A critical vulnerability in the Brotli compression decoder, tracked as CVE-2026-111497, is drawing attention from security researchers. Analysts at Wiz have published details under the name Broccoli2shell, describing how the flaw could be exploited and what defenders should do. The issue is trending in security discussions across the US, UK and Germany.
2
Critical Brotli decoder vulnerability draws widespread attention▼brotliGgoogleGB2002 h ago
Security researchers have disclosed a critical vulnerability in the Brotli compression library's decoder, dubbed Broccoli2shell. Brotli is built into browsers, web servers and countless applications, so the flaw could affect a huge share of internet infrastructure. Guides explaining the issue and how to patch it are spreading among developers, and searches about Brotli are surging in the UK, Russia, Germany and Japan.
3
Critical Brotli Decoder Flaw Hits Node.js and Beyond▼cve-2026-111497GgoogleDE2002 h ago
Security researchers are warning about a critical vulnerability in the Brotli compression decoder that allows remote code execution across all supported versions of Node.js. The flaw, dubbed Broccoli2shell, also affects Bun, Python and other widely used software that bundles the Brotli library. Node.js has released updates patching both its own and inherited vulnerabilities, and developers are urged to upgrade immediately as coverage spreads across the US, UK and Germany.