SecurityThe Hacker Newsabout 3 hours ago
Brotli Decoder Flaw Affects Node.js and Python
4 min read
A memory-corruption flaw tracked as CVE-2026-111497 affects Node.js, Bun, and Python software. Google assigned the CVE a 9.2 critical rating on the CVSS 4.0 scale. The issue was first disclosed on October 21 after fixes shipped from Node.js and Google. Imperva researchers demonstrated code execution on an unpatched Node.js 24.22.0 build for Linux on ARM64.
Level
Hype check
Tap to vote and see what everyone thinks.
