brotli2scan
HTTP2Shell (Brotli)
Memory corruption in the Brotli decompressor. Hits Node.js, Python, .NET, Envoy and more.
Criticalsince 21 Oct 2026
Check your site for HTTP2Shell
Probably not. Let's check.
When a serious web vulnerability hits the news, pick it below, enter your website and get a plain answer in seconds. Free, no account, nothing to install.
Newest first. A new scanner appears when a big one drops.
brotli2scan
Memory corruption in the Brotli decompressor. Hits Node.js, Python, .NET, Envoy and more.
php2scan
Remote code execution in PHP itself. Hits WordPress, Joomla, Nextcloud and every other PHP site.
Each one has its own scanner, built for exactly that problem.
The scanner loads your start page once, the same way a browser does.
Affected, patched, or not visible from outside, plus what to do next.