Derrick Mehaffy
Support Engineering Manager & Security Lead
Security & Privacy●13 min read
Node.js Brotli vulnerability (CVE-2026-111497): what it means for Strapi
A crafted Brotli request can corrupt memory in Node.js (CVE-2026-111497). Learn how it affects Strapi and how to patch on Strapi Cloud or self-hosted.
- Security Disclosure of Vulnerabilities: CVE-2025-64526, CVE-2026-22599, CVE-2026-22706, CVE-2026-22707, and CVE-2026-27886
- Axios Supply Chain Incident: Your Strapi Project Is Safe
- Security Disclosure of Vulnerabilities: CVE-2025-3930, CVE-2025-53092, CVE-2025-25298, CVE-2024-56143, and CVE-2024-52588
- Security Disclosure of Vulnerabilities: CVE-2024-31217, CVE-2024-29181, and CVE-2024-34065 for June 2024
- Security Disclosure of Vulnerabilities: CVE-2023-36472, CVE-2023-38507, CVE-2023-37263, and CVE-2023-39345
- Security Disclosure of Vulnerabilities: CVE-2023-34235 and CVE-2023-34093
- Security Disclosure of Vulnerabilities: CVE-2023-22893, CVE-2023-22621, and CVE-2023-22894
- Migrating our community chat from Slack to Discord
- Introducing Strapi Community Forum
Join our Newsletter
Get all the latest news and events.
