https://anazhd.com/tags/node2shell/ Recent content in Node2shell on Anaz Haidhar Hugo -- gohugo.io en © 2026 Anaz Haidhar Fri, 23 Oct 2026 22:00:00 +0800 https://anazhd.com/posts/nodejs-brotli-rce-cve-2026-111497/ Thu, 22 Oct 2026 18:27:55 +0800 https://anazhd.com/posts/nodejs-brotli-rce-cve-2026-111497/ <p>I just wrote about <a href="https://anazhd.com/posts/php2shell-cve-2026-109618-109619/" >PHP2Shell and PHP&rsquo;s request-lifecycle bugs</a>. Now Node.js has its own runtime security update to deal with. Different engine, different failure mode, same uncomfortable reminder: safe-looking application code still depends on native code underneath it.</p>