#CVE-2026-111497

Critical Brotli Flaw Lets Attackers Run Code on Node.js Servers

A buffer overflow in the Brotli decoder, bundled with Node.js, scores 9.2 on the severity scale. Researchers already have a working exploit.