Ionuț RUSU
•
Oct 22
•
in Articles
• 3 min read
Node.js Brotli RCE CVE-2026-111497: What Happened and How to Patch
Node.js · Security · npm
On October 21, 2026 the Node.js team released security fixes for the 22.x, 24.x and 26.x lines, covering 10 CVEs. The most serious, CVE-2026-111497, is an ...