As cited
Copy frozen at (site build).
vulnerabilities
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js released security patches on October 21 across versions 22.x, 24.x, and 26.x to address 10 vulnerabilities. The most critical flaw exists in the bundled Brotli decompression library and could permit remote code execution on affected systems.
Why it matters: Organizations running any supported Node.js version must apply these patches immediately, as the Brotli decoder vulnerability enables unauthenticated remote code execution without user interaction.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js released security patches on October 21 across versions 22.x, 24.x, and 26.x to address 10 vulnerabilities. The most critical flaw exists in the bundled Brotli decompression library and could permit remote code execution on affected systems.
Why it matters: Organizations running any supported Node.js version must apply these patches immediately, as the Brotli decoder vulnerability enables unauthenticated remote code execution without user interaction.
- Source published
- First seen by Cybersecurity Tracker