CVE-2026-111497 is not limited to nodejs. The brotli decoder is also included in other projects, including curl[0] and git[1].

[0] https://infosec.exchange/@harrysintonen/117489564359709891

[1] https://infosec.exchange/@harrysintonen/117489801970908776