brotli

Node.js patched a code-execution Brotli bug October 21

Imperva's Node2Shell runs code on a stock Node.js 24.22.0 image through a bundled Brotli decoder flaw, CVE-2026-111497. What is exposed and how to patch.