Skip to content

Blog: update brotli vulnerability credits in october 2026 security release post - #9231

Merged
ovflowd merged 1 commit into
mainfrom
blog/brotli-credits
Oct 22, 2026
Merged

ovflowd merged 1 commit into
mainfrom
blog/brotli-credits

Conversation

@mcollina

@mcollina mcollina commented Oct 21, 2026 •

Copy link
Copy Markdown
Member

Credits OpenAI Codex Security (Khai Tran and Sylvie Mayer) for reporting the Brotli decoder out-of-bounds write (CVE-2026-111497), and mcollina and aduh95 for fixing it.

…lease post

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A4P4g5oC6rfCgsCv4u9H5p
@vercel

vercel Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
nodejs-org Ready Ready Preview Oct 21, 2026 11:55pm UTC

Request Review

@mcollina
mcollina marked this pull request as ready for review October 21, 2026 23:56
@mcollina
mcollina requested a review from a team as a code owner October 21, 2026 23:56
@codecov

codecov Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.07%. Comparing base (b58692e) to head (facb075).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #9231   +/-   ##
=======================================
  Coverage   86.07%   86.07%           
=======================================
  Files          86       86           
  Lines        6075     6075           
  Branches      361      361           
=======================================
  Hits         5229     5229           
  Misses        842      842           
  Partials        4        4           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@github-actions

Copy link
Copy Markdown
Contributor

📦 Build Size Comparison

Summary

Metric Value
Old Total First Load JS 7.20 MB
New Total First Load JS 7.20 MB
Delta 0 B (0.00%)

@ovflowd
ovflowd added this pull request to the merge queue Oct 22, 2026
@ovflowd ovflowd added the fast-track Fast Tracking PRs label Oct 22, 2026
Merged via the queue into main with commit d216a65 Oct 22, 2026
22 of 27 checks passed
@ovflowd
ovflowd deleted the blog/brotli-credits branch October 22, 2026 12:18

This branch was successfully deployed

1 active deployment
Preview — facb075a Deployed Oct 21, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

fast-track Fast Tracking PRs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants