OpenAI Codex Security researchers reported CVE-2026-111497, a Brotli decoder flaw that prompted patches for Node.js 22.x, 24.x and 26.x.
A remote code execution vulnerability that could allow attackers to seize system control has been discovered in the Brotli ...