Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js released security updates on October 21 for its 22.x, 24.x and 26.x lines, fixing 10 flaws, the most serious an out-of-bounds write in the bundled Brotli decoder that the project says can allow remote code execution. Fixed versions are 22.23.4,...