From 17d0877a4cedf1b44b9ce8f0927654ef5436390d Mon Sep 17 00:00:00 2001 From: Luis Ortiz <2839770+anobjectn@users.noreply.github.com> Date: Wed, 28 Oct 2026 15:35:06 -0400 Subject: [PATCH] docs(changelog): add the #1458 fragment Co-Authored-By: Claude Sonnet 5.5 --- changelog.d/1458-node-24-22-1-security-release.md | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 changelog.d/1458-node-24-22-1-security-release.md diff --git a/changelog.d/1458-node-24-22-1-security-release.md b/changelog.d/1458-node-24-22-1-security-release.md new file mode 100644 index 000000000..a440892a8 --- /dev/null +++ b/changelog.d/1458-node-24-22-1-security-release.md @@ -0,0 +1,3 @@ +- The Docker image and CI now pin Node 24.22.1, the first 24.x release with + the October 21, 2026 security fixes, including CVE-2026-111497 (a Brotli + decoder flaw that can lead to remote code execution) (anobjectn, #1458).