#bun

Brotli decoder bug puts Node.js, Bun, Python and Envoy apps at risk

CVE-2026-111497, a memory flaw in Google's Brotli decoder code, reaches every program that bundles it, so Node.js, Bun, Envoy and Python users must update each copy.

1h ago · 5 min read