A critical bug in the Brotli decompression code used by Node.js, .NET, Python tools and more is now being attacked.

On October 30, 2026, Visual Studio has released a fix via CVE-2026-118147. Affected versions include Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.11, Microsoft ...

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...

The vulnerability in Google’s Brotli decoder, first called “node2shell”, affects more software. Admins should update promptly ...

The old Internet, where anyone could host a server is over, but it’s just the final blow in an ending that has been coming for years. The future, though, is brighter than it appears.

Anthropic sandbox-runtime (srt) is the open-source, OS-level sandbox behind Claude Code. It restricts file and network access ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and ...

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...

Three incidents hit at least nine languages and six Linux distributions in 48 hours. If you’re wondering whether you need to ...

This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...

IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP, ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix 10 flaws, including Brotli RCE bug CVE-2026-111497 and three TLS hostname bugs.