Brotli Vulnerability (CVE-2026-111497): One Library Flaw Hits Node.js, .NET, Python and More
The Brotli vulnerability CVE-2026-111497 is a critical out-of-bounds write in Google's Brotli decoder that reaches Node.js, .NET, Python, Bun and beyond. Here's who is affected, how to tell if you're exposed, and the patched versions for every ecosystem.