Node.js

Everything Firewall Pulse has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.

23 Oct
Vulnerabilities

Node.js Brotli Overflow Flaw CVE-2026-111497 Fixes Remote Code Execution

Researchers demonstrated remote code execution in Node.js via a critical buffer overflow in the bundled Brotli decoder, affecting versions up to 1.2.0.

14 Oct
Vulnerabilities

doc-recog Library OS Command Injection in Path Processing

A critical flaw in doc-recog versions up to 1.1.6 allows attackers to execute system commands via crafted document file paths.