Microsoft and others scramble to patch Node.js flaw which could be the next PHP-level issue

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Crypto Briefing

OpenAI uncovers remote code execution flaw in Brotli compression library

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

Vulnerability in Node.js Brotli decoder: 'Node2Shell' demonstrates code execution in official builds using crafted data

IntroductionImperva researchers have demonstrated that crafted Brotli data can be used to execute attacker code in ...
InfoWorld

Prisma.js: Code-first ORM in JavaScript

Get a hands-on tour of the leading JavaScript object-relational mapping tool, which you can use with MongoDB and traditional databases. Prisma is a popular data-mapping layer (ORM) for server-side ...