vulnerability
Imported story
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Source: The Hacker News · Published · Last checked 1 day ago · 1 min read
Read original source ↗ (thehackernews.com)
Publisher excerpt From The Hacker News
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacker could run code of their choosing on the affected system. Each supported line has one fixed version:
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.