CERT24Vulnerability in the Google Brotli decoder in Node.js: update nowLoading data…
CERT24Threat Observatory
Period

Vulnerability in the Google Brotli decoder in Node.js: update now

A vulnerability, CVE-2026-111497, has been found in Google's Brotli decompression library, which is used in Node.js, among other software. The NCSC assesses the likelihood of exploitation as medium and the potential damage as high. There is currently no known evidence of active exploitation.

← Back to intelligence

Vulnerability in the Google Brotli decoder in Node.js: update now

A vulnerability, CVE-2026-111497, has been found in Google's Brotli decompression library, which is used in Node.js, among other software. The NCSC assesses the likelihood of exploitation as medium and the potential damage as high. There is currently no known evidence of active exploitation.