Remote Code Execution

Node.js Patch Follows Proof‑of‑Concept Showing RCE via Bundled Brotli Decoder

Attackers can craft Brotli-compressed data that triggers an out-of-bounds write in Node.js’s bundled decoder, creating a path to remote code execution.