Source: thehackernews.com
Node.js released security updates on October 21 addressing 10 vulnerabilities across its three supported release lines: 22.x, 24.x, and 26.x. The most critical flaw resides in the Brotli decompression code bundled with Node.js. This vulnerability could allow remote code execution, enabling attackers to run arbitrary code on affected systems. All currently supported Node.js versions are impacted. Fixed versions have been released for each supported release line. The severity of the RCE potential makes this a high-priority patch for organizations running Node.js in production environments.
