Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

4 / 4 results
Active filter:tag: #node-js✕ clear
Critical Brotli buffer overflow (CVE-2026-111497) enables RCE in Node.jscriticalbug_reportVulnerability
bug_reportVulnerability

Critical Brotli buffer overflow (CVE-2026-111497) enables RCE in Node.js

Brotli C decoder library versions 1.0.3–1.0.9, 1.1.0, and 1.2.0. Affects Node.js (versions prior to 22.23.4, 24.22.1, 26.12.1), Python HTTP clients (urllib3[brotli], requests, httpx, aiohttp[speedups]), .NET, and any application decompressing attacke…

Node.js26 Oct · 15:27 UTC
Node.js Brotli RCE (CVE-2026-111497) exploited via crafted compression datacriticalbug_reportVulnerability
bug_reportVulnerability

Node.js Brotli RCE (CVE-2026-111497) exploited via crafted compression data

Node.js versions 22.x, 24.x, and 26.x on all architectures. Confirmed RCE on 24.22.0 Linux arm64. Applications decoding untrusted Brotli data via fetch() responses or request body middleware (Express 5.x body parsers, body-parser 2.x) are vulnerable.…

CVE-2026-11149723 Oct · 06:40 UTC
Multiple high-severity vulnerabilities in Node.js require immediate patchinghighbug_reportVulnerability
bug_reportVulnerability

Multiple high-severity vulnerabilities in Node.js require immediate patching

Node.js - specific versions not provided in advisory. All Node.js deployments should be evaluated for patch applicability.

Node.js22 Oct · 13:19 UTC
Attackers abuse legitimate Node.js runtime to deploy malware via ClickFixhighbug_reportVulnerability
bug_reportVulnerability

Attackers abuse legitimate Node.js runtime to deploy malware via ClickFix

Organizations using Node.js in their environments, particularly government departments, technology companies, hotels, fintech, e-commerce, professional services, and retail logistics.

Node.js3 Sep · 08:43 UTC