Vercel
Node.js Brotli Bug Allows RCE, and Vercel's WAF Only Covers Inbound
Node.js fixed a high-severity Brotli decoder flaw, CVE-2026-111497. Vercel's WAF blocks inbound attacks but not responses a function fetches.
Topic
Node.js
1 article tagged Node.js.