[–] j12y 3d ago ↗ Brotli is bigger than node2shell, php2shell or an npm bug. Its copied into runtimes, databases, document readers, image libraries, language bindings, and native packages. (CVE-2026-111497) [–] gnabgib 3d ago ↗ Are you unaware that Node2Shell (cve-2026-111497) got renamed to Broccoli2Shell (reason unjustified)? It's not bigger.Node2Shell = cve-2026-111497 (14 points, 5 days ago) https://news.ycombinator.com/item?id=50203180Broccoli2Shell (402 points, 4 days ago, 219 comments) https://news.ycombinator.com/item?id=50219177
[–] gnabgib 3d ago ↗ Are you unaware that Node2Shell (cve-2026-111497) got renamed to Broccoli2Shell (reason unjustified)? It's not bigger.Node2Shell = cve-2026-111497 (14 points, 5 days ago) https://news.ycombinator.com/item?id=50203180Broccoli2Shell (402 points, 4 days ago, 219 comments) https://news.ycombinator.com/item?id=50219177
2 comments
[ 4.7 ms ] story [ 20.6 ms ] threadNode2Shell = cve-2026-111497 (14 points, 5 days ago) https://news.ycombinator.com/item?id=50203180
Broccoli2Shell (402 points, 4 days ago, 219 comments) https://news.ycombinator.com/item?id=50219177