Do Not Trust process.versions.brotli. How to Check Node.js, .NET and Envoy for the Brotli Bug (CVE-2026-111497)
Do not use process.versions.brotli to decide if your Node.js is safe from the new Brotli bug. I ran it on the official, patched Node.js 24.22.1 build from nodejs.org on 31 October 2026. It printed 1.2
Responses
Markdown supported · ⌘↵ to post
No responses yet.