<p>
The Node.js project has
<a
href="https://nodejs.org/en/blog/vulnerability/october-2026-security-releases">released
a number of security updates</a> to fix, among other vulnerabilities, a
remote-code-execution bug affecting programs that use Brotli compression. And,
in case any programmers who use compiled languages thought they could relax, the
<a href="https://musl.libc.org/">musl libc project</a> has also announced a
new vulnerability: an
<a
href="https://lwn.net/ml/all/20261021154307.GA4413%40brightrain.aerifal.cx/">out-of-bounds
write</a> that could potentially lead to remote code execution, although that
has not been demonstrated.
</p>