While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...
On October 21, the Node.js project released security updates for versions 22.x, 24.x, and 26.x. Each branch contains ...
Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...
2d
Brotli vulnerability 'Node2Shell': A checklist to ensure you don't just fix Node.js and stop there
I will start with the conclusion. The Brotli vulnerability disclosed on October 21 is not just a Node.js issue. Because the ...
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...
The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Unofficial binaries for Node.js. Contribute to nodejs/unofficial-builds development by creating an account on GitHub.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results