Post
Socket
socket.dev
did:plc:n6f3j47vjucu5ijwdmow7n2w
Node patched eMudhra and Brotli last week, but updating Node only covered part of the problem. Other applications carried their own copies of Brotli or still trusted the compromised certificates, leaving teams with more software to find and fix.
https://socket.dev/blog/emudhra-brotli-security-fix
2026-10-26T22:02:06.058Z