Evolving threat ๐จ CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into โHTTP2Shell.โ
A significant blast radius.
This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression.
Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
@theshaneemoret@gregoryjohn@1Password I manage my vault locally, but you have to spend time managing your backups and security and syncing across devices. Cloud hosting may be a reasonable trade-off acceptance