Researchers Expose Critical Remote Code Execution Vulnerability in Node.js via Crafted Brotli Data

Imperva researchers demonstrated a remote code execution vulnerability in official Node.js builds. The Node2Shell exploit leverages malformed Brotli data…

Update Node.js immediately to the latest version containing the CVE-2026-111497 patch. Audit all production Node.js applications, especially those running on Linux arm64 systems. Implement strict input validation for applications processing compressed data.