Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled data.
More info