Microsoft and others scramble to patch 'HTTP2Shell' flaw which could be the next PHP-level issue — Node.js problem may also affect millions of sites

A critical Brotli compression flaw, dubbed HTTP2Shell, could enable memory corruption and remote code executionThe vulnerability affects widely used software including Node.js, Python packages, and .NET applicationsVendors released patches, and administrators are urged to update immediately despite no confirmed in-the-wild exploitationMultiple tech companies and projects have recently pushed patches for a vulnerability called “HTTP2Shell” which could enable remote code execution (RCE) attack