Node.js Vulnerability Poses Remote Code Execution Risk

A critical vulnerability (CVE-2026-111497) with a CVSS score of 9.8 has been found in the Brotli decoder component of Node.js. This flaw could enable attackers to execute arbitrary code remotely or access sensitive information. The Cyber Security Agency of Singapore recommends immediate patching for all affected Node.js versions to mitigate the significant security risk.