Didn't I just say that it's scary how it seems to be able to force things into reality, even if they aren't rational?I wrote ...
Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
OpenAI Codex Security researchers reported CVE-2026-111497, a Brotli decoder flaw that prompted patches for Node.js 22.x, 24.x and 26.x.
Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...