Security incidents tagged Brotli. Newest first.
On Oct 21 2026 Node.js shipped security updates for 22.x, 24.x and 26.x fixing ten vulnerabilities. The headline issue is CVE-2026-111497, a Brotli decoder out-of-bounds write (high per Node.js, CVSS 9.2 critical per the Google CNA on NVD, rooted in Google Brotli 1.0.3 to 1.2.0) that can enable remote code execution when attacker-controlled Brotli data is decoded. The same release also fixes TLS hostname/IP bypasses and DNS NUL truncation, and refreshes the bundled CA store for the eMudhra incident.
Node.jsSince Oct 21, 2026
Liked PHP2Shell? You’re gonna love Node2Shell. We reproduced CVE-2026-111497 as pre-auth RCE. On a vulnerable Node.js runtime, app.use(express.json()) is enough to expose your server to code execution through a single Brotli request. Patch your systems now!
🔐 Node.js security updates are now available! New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues. Review the details and update your systems to stay secure. 🔗 t.co/W4kfzx5lxz #NodeJS #Security
🚨 BREAKING: Node.js just dropped its OWN security bombshell. 4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers. → 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated t.co/k3Vb8WK1eC
The Node.js security release fixes 10 flaws, including a Brotli remote code execution bug, CVE-2026-111497. Update to 26.12.1, 24.22.1 or 22.23.4. #NodeJS #CVE2026111497 #CVE2026105483 #CVE2026106069 #RemoteCodeExecution #TLS #JavaScript #CyberSecurity t.co/2Rmy6FPWq0
Breaking 🚨 - Node.js October 2026 Security Releases – High severity fixes available now! Security updates are out for the supported Node.js lines: 26.x, 24.x, and 22.x. Highest severity is HIGH. Key issues include: • TLS non-canonical IP address handling (CVE-2026-106069 / t.co/npxfOdxGdg
Tinkerer ClubOwn your servers, run your own AI, pay $0/month for software.
Matte3D mockups and screen recordings with pro-level video editing
PostizAgentic social scheduler.
ScreenshotOneThe best screenshot API for developers and agents
ether.fia neobank with a built in ai-connector, build your own frontend to your finance with claude, chatgpt or your LLM of choice! Feedback always 
OpenProseReliable, event-driven multiagent workflows — in Markdown.
OpenTweetAgentic X (Twitter) autopilot.
AppSumo1M+ entrepreneurs use AppSumo to find the best deals on software for their business. One-time payments, lifetime access.
Team Spartan by CONFLICTKnow what matters. Get it fixed. Experience spans high-traffic consumer platforms, cloud infrastructure, and security — built under real ope
Browserless.ioThe web layer your agent runs on.
StrixHack yourself before the bad guys do. Open source (70k+ stars on Github)
Maple VCWe're 3 operators (digitalocean, uber, shopify) turned investors who write first checks into folks with ambition to build global businesses.
RakazoOpen source Grok Bot
The Influencer AIAI influencer generator: create a realistic influencer from traits or your photos, then make photos, talking videos and UGC ads with the sam