Baltics · research preview

Node2Shell in the Baltics

Which Node-based stacks answer on the web in Lithuania, Latvia and Estonia, and how many of them run on a managed platform. Node2Shell (also called HTTP2Shell) is a Brotli flaw fixed in Node.js and Bun. A Node-based runtime never states its version from outside, so this page counts exposure by stack and cannot tell patched from unpatched. Counted per service, updated every hour.

CVE-2026-111497

Fixed in Node.js 22.23.4 / 24.22.1 / 26.12.1, Bun 1.4.4; Brotli library 1.0.10 / 1.1.1 / 1.2.1.

Self-hosted only

Fixed releases

Upgrade self-hosted services to these releases or newer. Platform-managed services are patched by the provider.

Node.js 2222.23.4

Node.js 2424.22.1

Node.js 2626.12.1

Bun1.4.4

Brotli library1.0.10 · 1.1.1 · 1.2.1

Notes & limitations

A runtime version is never visible from outside: Node.js, Bun and Deno do not state it in HTTP headers. This page counts services that reveal a Node-based stack and cannot tell patched from unpatched.
Services on a managed platform are patched by the provider and count as platform-managed; “Self-hosted only” (on by default) leaves them out of the charts and the stack shares.
Bun and Deno are counted only when the server names them literally, which is rare, so their numbers are a floor.
Many Node services hide every header that would reveal the stack and are not counted, so the real numbers are higher.
A service is a website (one name) or, where no name is known, an address and port; one address can host many sites.
Data is updated hourly; a day is final at 00:00 UTC. The daily chart starts on 2026-10-26.
Found a mistake? Contact us and we will correct it.