Node2Shell (CVE-2026-111497) is an out-of-bounds write flaw in Google’s Brotli decompression library, which Node.js bundles. Specially crafted