news.mlab.sh
Back to the feed
vulnerability

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Published · Updated · Source: The Hacker News · [email protected] (The Hacker News)
Medium
Image: The Hacker News
Summary

Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacker could run code of their choosing on th

Read the full article at The Hacker News
Add news.mlab.sh as a preferred source on Google

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Report an error
Confirmed errors are fixed and listed on /corrections.