On October 21, 2026, Node.js released v22.23.4, v24.22.1, and v26.12.1, which fix 10 vulnerabilities. The most severe, ...
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Node.js has shipped security updates to fix a high-severity vulnerability that could let an attacker run arbitrary code on a ...
OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...
IntroductionImperva researchers have demonstrated that crafted Brotli data can be used to execute attacker code in ...
A Node.js module downloaded millions of times has a security flaw that can enable attackers to perform a denial-of-service (DoS) attack on a server or get full-fledged remote shell access. The ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results