A vulnerability in Brotli decompression has prompted fixes for Node.js, Bun and Envoy. Here are the proof-of-concept ...

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

OpenAI’s open-source security initiative has put out a standalone resource page for CVE-2026-111497, the critical Brotli ...

OpenAI Codex Security researchers reported CVE-2026-111497, a Brotli decoder flaw that prompted patches for Node.js 22.x, 24.x and 26.x.

Node.js patched node2shell, CVE-2026-111497, after a Brotli decoder flaw that can trigger crashes, memory leaks, or remote ...

Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...

On October 20–21, 2026, important security information was released one after another for multiple pieces of software that ...

Node.js has released security updates for its 22.x, 24.x, and 26.x release lines, fixing a total of 10 vulnerabilities. Among the four rated ...

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...

Node.js has shipped security updates to fix a high-severity vulnerability that could let an attacker run arbitrary code on a ...