Node.js patches Brotli decoder flaw that could allow remote code execution
Node.js 22.23.4, 24.22.1 and 26.12.1 fix CVE-2026-111497, an out-of-bounds write in the bundled Brotli decoder, plus nine other flaws.
#OpenJS Foundation
Cybersecurity news about “OpenJS Foundation”.