It's not from tonight.

## 2 days ago:

Node.js Brotli RCE (CVE-2026-111497) (23 points) https://news.ycombinator.com/item?id=50189292

Node.js security advisory: Brotli decoder RCE (CVE-2026-111497) (17 points, 3 comments) https://news.ycombinator.com/item?id=50192733

## 1 day ago:

Node2Shell: Node.js Brotli vulnerability allows remote code execution (14 points) https://news.ycombinator.com/item?id=50203180

Node2Shell: From Brotli Data to Remote Code Execution (4 points) https://news.ycombinator.com/item?id=50204501

## Today's dupes:

Brotli vulnerability affects curl and Git (22 points, 8 comments) https://news.ycombinator.com/item?id=50207180

<this>