Oct 222026 Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled data.