Skip to main content
Known Participant
Oct 28, 2026 12:13 PM UTC
Answered

Critical Brotli Vulnerability Affects Node.js

According to recent reports, Node.js is once again a security vulnerability in programs.
When will this vulnerability be fixed?

    J E L
    J E LCorrect answer
    Community Expert
    Oct 28, 2026 4:26 PM UTC

    ​@thorstent40082701, in researching this, I believe this is a general Node.js security advisory (CVE-2026-111497) and doesn’t affect Photoshop. Photoshop is a native C++ desktop application and does not run on Node.js. This vulnerability has no bearing on it. It’s the same with Photoshop on the Web, where the client-side runs as ordinary browser JavaScript, not Node.js.

    Note that a moderator may move, close, or delete your post unless you have something else to add that pertains specifically to Photoshop.

    3 replies

    Legend
    Oct 28, 2026 5:42 PM UTC

    Kudos for reporting a potential problem!

    Translate
    Larry
    J E L
    Community Expert
    J E LCommunity ExpertCorrect answer
    Community Expert
    Oct 28, 2026 4:26 PM UTC

    ​@thorstent40082701, in researching this, I believe this is a general Node.js security advisory (CVE-2026-111497) and doesn’t affect Photoshop. Photoshop is a native C++ desktop application and does not run on Node.js. This vulnerability has no bearing on it. It’s the same with Photoshop on the Web, where the client-side runs as ordinary browser JavaScript, not Node.js.

    Note that a moderator may move, close, or delete your post unless you have something else to add that pertains specifically to Photoshop.

    Translate
    Known Participant
    Oct 28, 2026 4:58 PM UTC

    Thanks for the info—so everything's fine then.

    Translate