research Datadog Security Labs infra

Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder

// AI summary

Datadog Security Labs reproduced CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js and other runtimes, and published detection and remediation guidance.

// from the source

We reproduced CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js and other runtimes, and explain how to detect and remediate it.
Read at securitylabs.datadoghq.com ↗ More from Datadog Security Labs

# more from Datadog Security Labs

  1. Datadog Security Labs

    Code security for new coders

    securitylabs.datadoghq.com