Post

Ilja
@fubits.dev

Oh, Node has a RCE + patch as well And: “The same fix shipped in Brotli 1.2.1, 1.1.1, and 1.0.10 on October 21, so other software that bundles Brotli may need the same update.” thehackernews.com/2026/10/node...

thehackernews.comNode.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported VersionsNode.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled data.

3 reposts12 likes