Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps: https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497 Discussion: http://news.ycombinator.com/item?id=50219177