Rough week to run Node-based web apps.
WebContainers are the infinitely scalable secure sandbox for Node.js. Untrusted code runs isolated in the browser, away from your OS and your servers. Same tech powering @boltdotnew
Get a demo: bolt.new/demo More below 👇
⚠️ Node.js is vulnerable to remote code execution.
CVE-2026-111497 (high): A Node.js process that decompresses attacker-controlled Brotli data can be made to leak memory or run arbitrary code.
You’re exposed if your app or a library decompresses bad Brotli data (e.g. the
