NODE .js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning...
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Article by CyberSIXT