Node.js Brotli RCE (CVE-2026-111497): Your fetch() Decodes Brotli by Default

On 2026-10-21 the Node.js project shipped 22.23.4, 24.22.1 and 26.12.1, fixing ten CVEs across the...