HTTP2Shell

Security researchers are flagging http2shell, a remote code execution vulnerability that affects not just one language but several major runtimes including Node.js and Python. The flaw is being described as an evolving threat because exploitation techniques keep adapting, and developers across ecosystems are being urged to check whether their deployments are exposed and patch promptly.

Newly disclosed vulnerabilities in Brotli decoder implementations have been given names including Node2Shell, Broccoli2Shell and HTTP2Shell, suggesting the flaws could allow attackers to achieve remote code execution in environments that parse Brotli-compressed data. Brotli is a compression format widely used across web servers, browsers and developer tooling, so affected libraries are broadly deployed. Esri has published an advisory referencing the issues, and security teams are checking whether their products embed vulnerable decoder code.