Python patches critical Brotli decoder flaw in affected packages

Python released a security update on October 23, 2026, for CVE-2026-111497, the Brotli decoder flaw known as “Node2Shell.” The vulnerability affects the PyPI packages Brotli and brotlicffi and can be reached when applications decode attacker-controlled…