The Hacker News

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

Emergency Node.js Update: First, Identify the 'Version in Use' — October 21 Security Release

On October 21, the Node.js project released security updates for versions 22.x, 24.x, and 26.x. Each branch contains ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
TechJuice

PKCERT Warns of Critical Node.js Security Flaws & Urges Immediate Patching

PKCERT warns organizations of critical Node.js security flaws. Update immediately to prevent remote code execution and data ...
CSO Online

Node2Shell puts Microsoft and Node.js on Brotli patch duty

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...

Node.js fixes its own and inherited security vulnerabilities

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...
VentureBeat

Node.js and JS foundations are merging to form OpenJS

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More The Linux Foundation today unveiled several major collaborative ...
Newswire

GreenGeeks Launches Node.js Hosting for Web Apps and AI-Built Projects

Deploy Node.js applications, APIs and backends without managing your own VPSGreenGeeks today announced the launch of Managed Node.js Hosting, giving developers, businesses and AI-assisted builders a ...