Node.js security update: Brotli is not the only reason
The 21 October Node.js releases fix Brotli, DNS, TLS and other issues. Check the runtime actually serving your application, not just dependencies.
Highnodejs
Read article What changed, who is affected, and what you can do to protect your website.