Broccoli2Shell: Brotli decoder RCE (CVE-2026-111497) in Node.js, Python and more | Hacker News Reader