Node.js released emergency patches for three versions to fix a critical Brotli compression library flaw (CVE-2026-111497) ...
A critical Brotli compression bug in Node.js was patched by Google and volunteer developers, not OpenAI as headlines claimed.