AI & Enterprise
Theori releases response plan for Node.js flaw for sites unable to patch immediately
AI-based offensive cybersecurity company Theori said it has reproduced and verified a critical flaw found in the Node.js runtime and released an emergency response guide for companies and institutions. The vulnerability, dubbed Node2Shell, stems from an out-of-bounds write defect in a Brotli decoder module, enabling denial-of-service, memory exposure and remote code execution without authentication. Theori also suggested temporary mitigations and opened a free online diagnostic service at nodejsguard.io.
