Security & Privacy
Security & Privacy●13 min read
Node.js Brotli vulnerability (CVE-2026-111497): what it means for Strapi
A crafted Brotli request can corrupt memory in Node.js (CVE-2026-111497). Learn how it affects Strapi and how to patch on Strapi Cloud or self-hosted.

- Security Disclosure of Vulnerabilities: CVE-2024-31217, CVE-2024-29181, and CVE-2024-34065 for June 2024
- Security Disclosure of Vulnerabilities: CVE-2023-36472, CVE-2023-38507, CVE-2023-37263, and CVE-2023-39345
- Best Practices of API Security in Strapi
- Security Disclosure of Vulnerabilities: CVE-2023-34235 and CVE-2023-34093
- Strapi Security Checklist
- What are Process Managers and How to use them with Strapi
Join our Newsletter
Get all the latest news and events.




