ChordNews
← All news

Microsoft ships emergency .NET patches for critical 'HTTP2Shell' Brotli flaw

By ChordNews · First written (updated )

Comments 0

Summary

Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell, according to BleepingComputer. A later BleepingComputer report describes a critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, which could allow attackers to corrupt memory and access sensitive data, and says it has triggered emergency patches.

This continues an earlier story: PHP ships emergency patches for two critical PHP2Shell remote code execution flaws

Later: Microsoft and others race to patch 'HTTP2Shell' flaw in Brotli compression library

Timeline

  1. BleepingComputer

    Source ↗

    BleepingComputer reports that Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.

  2. BleepingComputer

    Source ↗

    BleepingComputer reports that a critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data, and that it has triggered emergency patches.

Comments

No comments yet.

    to like and comment.

    © 2026 ChordNews