Privacy & SecurityNews
Critical Brotli flaw CVE-2026-111497: patch Node.js, Bun, Envoy, Istio
CVE-2026-111497, an out-of-bounds write in the Brotli decoder, is fixed in new Brotli, Node.js, Bun, Envoy and Istio releases. The fixed versions and how to check what you run.
