CVE-2026-111497 HIGH SEVERITY Node.js Brotli Decoder RCE

Vulnerability Advisories

Hi All,
Please find attached the Ross Security Advisory for CVE-2026-111497, the Node.js Brotli decoder vulnerability.
Ross Video’s assessment identified a direct impact on some products due to the use of the vulnerable component.
Please review the attached advisory for additional details, including the affected products and current remediation status.
If you have any questions or need further information, please reach out to us.

CVE-2026-111497 - Node.js - Vulnerability_Incident_Response_Advisory.pdf (274 KB)