From facb075a0d390f7b15d83c054e5202e9af50cb5d Mon Sep 17 00:00:00 2001 From: Matteo Collina Date: Wed, 21 Oct 2026 15:26:22 -0700 Subject: [PATCH] Blog: update brotli vulnerability credits in october 2026 security release post Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01A4P4g5oC6rfCgsCv4u9H5p --- .../en/blog/vulnerability/october-2026-security-releases.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/site/pages/en/blog/vulnerability/october-2026-security-releases.md b/apps/site/pages/en/blog/vulnerability/october-2026-security-releases.md index 80095c4f2a4e4..530a6c9211a5b 100644 --- a/apps/site/pages/en/blog/vulnerability/october-2026-security-releases.md +++ b/apps/site/pages/en/blog/vulnerability/october-2026-security-releases.md @@ -44,7 +44,7 @@ A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits r This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. -Thank you, to mcollina for reporting this vulnerability and thank you aduh95 for fixing it. +Thank you, to OpenAI Codex Security - Khai Tran and Sylvie Mayer for reporting this vulnerability and thank you mcollina and aduh95 for fixing it. ## Keep-alive socket process a response that was written before the request was sent (CVE-2026-105481) - (medium)