Node.js Releases Critical Security Update of Highest Severity
Node.js projects 26.x, 24.x, and 22.x have received security updates fixing 10 vulnerabilities, with the highest severity rated as high. Among them, a buffer overflow vulnerability in the Brotli decoder could allow remote code execution.
Node.js Releases High-Severity Security Updates
The Node.js project has released security updates for versions 26.x, 24.x, and 22.x, addressing 10 vulnerabilities, with the highest severity level being high. Among them, a buffer overflow vulnerability in the Brotli decoder could lead to remote code execution.
The updates are available on or after October 21, 2026. The project recommends using the latest versions; versions that have reached end-of-life are also affected by security vulnerabilities.
Source: nodejs.org
