http2shell

A newly dubbed vulnerability, http2shell, allows remote code execution across popular development platforms including Node.js and Python. Security researchers at Aikido Security are warning that the threat is still evolving, and developers are discussing the scope of affected runtimes and how quickly patches or mitigations need to be applied across web infrastructure.