On 21 October 2026 Node.js shipped security releases for the 22.x, 24.x and 26.x lines. The headline fix is CVE-2026-111497, a flaw in the Brotli decoder bundled in node:zlib, now widely called Node2S
Markdown supported · ⌘↵ to post
No responses yet.