Node2Shell: npm audit can't see the Node.js Brotli RCE
CVE-2026-111497 lives in the Node.js runtime, not your dependencies. Where Express 5 and fetch() expose you, and a short audit plus stopgap before you rebuild.
Tagged
#containers
eMudhra quits TLS, but your servers still trust its broken CAs
The exit announcement fixes nothing on your machines. Why the cracked eMudhra keys still work outside browsers, and the audit to run before mitmproxy users find you.