CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight updates to fix vulnerabilities that could crash millions more websites.

Imperva demonstrated code execution via crafted Brotli data on an official Node.js 24.22.0 Linux arm64 image; Node.js has issued fixes.

Node.js is a standard server-side JavaScript runtime used by many companies, including Netflix and LinkedIn. According to W3Techs data, it is used by approximately 7.4% of websites with known web ...

The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into dllhost.exe.