Saturday, October 24, 2026 · 3 of 5The Brotli decoder flaw, CVE-2026-111497, reaches Bun, Python and Envoy, not just Node.jsEach product needs its own update.Oct 24SecurityRead the full briefing · 19 stories