OpenAI Codex Security researchers reported CVE-2026-111497, a Brotli decoder flaw that prompted patches for Node.js 22.x, 24.x and 26.x.
Following the announcement of Deno's policy to end development, I investigated what needs to be fixed when migrating a small Deno app (about 60 lines, 2 dependencies) to Node 26.12.0 and Bun 1.4.3 by ...