Security News Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches BleepingComputer Daniel Bender 26 Oct 2026 Share A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.