On October 23, 2026, The Hacker News reported Brotli, Node.js, Imperva. The figures I am keeping are 24.22, 0, CVE-2026-111497. The framing is mine. Their sentences stay on their page.
The names I am willing to repeat are Brotli, Node.js, Imperva, Their. The figures in the report are 24.22, 0, CVE-2026-111497.
If this sits on a shop, a clinic, or a desk I run, I read the vendor notice before I tell anyone to patch.
Source I used: The Hacker News. The link is under this column.