Find vulnerable Brotli (CVE-2026-111497, Broccoli2Shell / Node2Shell / HTTP2Shell) in Kubernetes clusters, container images and Linux hosts. Checks the binaries themselves, not just version numbers, so it catches bundled copies in Node.js, Python, .NET, Bun and Envoy. Read-only, bash only.
nodejs python bash kubernetes dotnet incident-response brotli yara security-scanner yara-rules sarif devsecops vulnerability-scanner container-security cve-2026-111497 node2shell http2shell broccoli2shell
-
Updated
Oct 28, 2026 - Shell