Microsoft and others scramble to patch Node.js flaw which could be the next PHP-level issue

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

Microsoft and others scramble to patch Node.js flaw which could be the next PHP-level issue

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
Help Net Security

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.

New Broadcom Enhancements to TrueSource Spring Enterprise with Hub and App Advisor Help Customers Assess their Open Source Security Posture, Prioritize Fixes, and Automate Patching

Broadcom Fixes 89 New Open Source Vulnerabilities in TrueSource Spring Enterprise, Reaching 408 Total in 2026PALO ALTO, Calif., Oct. 27, 2026 (GLOBE NEWSWIRE) -- (NASDAQ: AVGO), a global technology ...