For those making use of the LZ4 extremely fast compression algorithm, LZ4 1.11 released today and brings multi-threaded compression support to its library (liblz4). LZ4 1.10 introduced initial ...

HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: ...

Summary of this articleHTTP2Shell is a critical vulnerability in the data compression technology "Brotli" that may affect ...

I will start with the conclusion. The Brotli vulnerability disclosed on October 21 is not just a Node.js issue. Because the ...

Nvidia gave us access to its Vera data center CPU for testing against Intel's Granite Rapids-AP and AMD's EPYC Turin.

On October 30, 2026, Visual Studio has released a fix via CVE-2026-118147. Affected versions include Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.11, Microsoft ...

Poetry vs uv compared: speed benchmarks, lockfiles, cache commands and why uv sync --locked matters in CI, plus a step-by-step Poetry to uv migration guide.

A critical vulnerability in Google's Brotli compression library could enable crashes, data exposure or system compromise. Organisations are urged to update affected software and rebuild embedded ...

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, Node.js and two Python packages.

Node.js says the Brotli decoder ‘kept appending input bytes to an eight-byte internal buffer’. Microsoft has now patched .NET against it.

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.