Security
14 min read
Node.js's October 2026 Brotli Decoder RCE: CVE-2026-111497
Find every runtime exposed to CVE-2026-111497, a High-severity Node.js Brotli bug fixed in 22.23.4, 24.22.1, and 26.12.1 — and never on end-of-life lines.
Atlas Security
Security Advisories
