Plan
active
Critical 'HTTP2Shell' Brotli memory-corruption flaw in Node.js
- Engineer — Plan: Brotli is bundled with Node.js and widely used for HTTP compression; the memory-corruption primitive is serious, but no KEV listing, public PoC, or EPSS signal is present. Audit Node.js versions across services and schedule patching to the fixed release this sprint.
- SOC/IR — Skip
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.