The Hacker News

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
Cybernews

PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...
OfficeChai

Node.js Patches Critical Brotli Decoder Flaw That Allowed Remote Code Execution, Vercel Rushes Out Emergency Firewall Rules

Node.js has shipped security updates to fix a high-severity vulnerability that could let an attacker run arbitrary code on a ...
El-Balad

Node.js patches Node2shell flaw with CVE-2026-111497 fix

Node.js patched node2shell, CVE-2026-111497, after a Brotli decoder flaw that can trigger crashes, memory leaks, or remote ...

GreenGeeks Launches Node.js Hosting for Web Apps and AI-Built Projects

APIs and backends without managing your own VPS today announced the launch of Managed Node.js Hosting, giving developers, businesses and AI-assisted builders a simpler way to deploy web applications ...