- Community aggregator
- Country: United States
Node.js October 2026 Security Release: Brotli RCE and 9 More CVEs
Originally published at muhammadmoiz.dev . On October 21, 2026, Node.js shipped security releases that fix 10 vulnerabilities across the 22.x, 24.x and 26.x lines. Four are rated High. The most serious, CVE-2026-111497, is an out-of-bounds write in the bundled Brotli decoder, and the project says…