CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...
Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled data.
While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight updates to fix vulnerabilities that could crash millions more websites.
The Node.js Brotli vulnerability and the issue surrounding the intermediate certificates of the certificate authority eMudhra ...
On October 21, 2026, Node.js released v22.23.4, v24.22.1, and v26.12.1, which fix 10 vulnerabilities. The most severe, CVE-2026-111497, is a flaw in the processing of Brotli compressed data; if a Node ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra certificates.
Unofficial binaries for Node.js. Contribute to nodejs/unofficial-builds development by creating an account on GitHub.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results