From ce13ef7c9e93787b779e21281ae27f862323908e Mon Sep 17 00:00:00 2001 From: Holger Jensen Date: Sat, 31 Oct 2026 10:32:10 +0100 Subject: [PATCH] chore: run on Node 26.12.1, past the Brotli decoder bug Node 26.12.0 bundles a Brotli decoder that writes past its buffer on a crafted stream (CVE-2026-111497); 26.12.1 has the fix. CI and anyone who starts from this repository read .nvmrc. --- .nvmrc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.nvmrc b/.nvmrc index 2b42e39..63f87c2 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -26.12.0 +26.12.1