Oct 21 Node.js patched a high-severity Brotli decompression vulnerability that could allow remote code execution RCE