Node.js

Everything BlueTeam Herald has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Update Node.js to 22.23.4, 24.22.1 or 26.12.1 to Patch High-Severity Brotli Flaw

Node.js released patches for a high-severity remote code execution vulnerability in its bundled Brotli decompression library across all supported release lines.

Oct 22, 2026

Vulnerabilities

Update Node.js follow-redirects to block CVE-2026-111755 credential leaks via regex escape flaw

A regex flaw in the Node.js follow-redirects package allows custom credential headers to leak during cross-origin redirects if header names contain specific characters.

Oct 21, 2026