
SecurityLead story
OpenAI's Codex Security team finds critical Brotli flaw hitting Node.js and Bun
CVE-2026-111497 sits in Google's Brotli decoder, and fixes are rolling out across Node.js, Bun, Envoy, Istio and Python packages.
Jaeden SchaferEditor in Chief5 min read