# Live news

Canonical: https://ournews.ai/live/d3aaf1cf-0979-44c0-b38d-660de8c54a94
Published: 2026-10-22T01:34:39.406764+00:00
Updated: 2026-10-22T01:34:39.406764+00:00

Node.js 22.23.4, 24.22.1 and 26.12.1 fix a high-severity Brotli decoder flaw that permits remote code execution (CVE-2026-111497), alongside other security issues.

Source: Node.js Project — https://nodejs.org/en/blog/release/v24.22.1/
Source date: 2026-10-21