Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

Node.js has shipped security updates to fix a high-severity vulnerability that could let an attacker run arbitrary code on a ...

A vulnerability in Brotli decompression has prompted fixes for Node.js, Bun and Envoy. Here are the proof-of-concept ...

Node.js patched 10 vulnerabilities across versions 26.x, 24.x, and 22.x, including four high-severity flaws affecting DNS, ...

OpenAI’s open-source security initiative has put out a standalone resource page for CVE-2026-111497, the critical Brotli ...

The Node.js Project released security updates on October 21, 2026, addressing ten vulnerabilities across its 26.x, 24.x, and ...

OpenAI Codex Security researchers reported CVE-2026-111497, a Brotli decoder flaw that prompted patches for Node.js 22.x, 24.x and 26.x.

Node.js has released security updates for its 22.x, 24.x, and 26.x release lines, fixing a total of 10 vulnerabilities. Among the four rated ...

Valve closed an outside developer's working patch for Steam Frame hardware video decoding on October 12, as a duplicate of a ...