Evidence · DiggingBeagle record
Node.js: October 21 security releases
- Source role
- vendor statement
Evidence record
Claim-level citations (1)
- supportsNode.js credits Codex Security for a Brotli memory-safety finding: CVE-2026-111497 affects Node.js 26.x, 24.x and 22.x. The October 21 release set lists versions 26.12.1, 24.22.1 and 22.23.4.
Node.js Brotli decoder out-of-bounds write; Downloads and release details