Intel

AIKIDO-2026-27763

iltorb is vulnerable to Use of Unmaintained Third Party Components

Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published 3 days ago
November 6, 2026

98

CVE Score

Critical

Use of Unmaintained Third Party Components

Are you affected? Scan for Free

TL;DR

The iltorb package is deprecated and no longer maintained. Its repository is archived, and the maintainers recommend the built-in zlib Brotli APIs.

How do I fix this?

Remove iltorb and replace it with the built-in zlib Brotli APIs on a supported, patched Node.js release.

Who does this affect?

You are affected if you use iltorb in your application.

Package

Versions

0.0.0 - *

No fix available

Background info

iltorb is vulnerable to Use of Unmaintained Third Party Components in all versions.

Get secure today,
quickly and for free.

Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.

No credit card required | Scan results in 32 seconds.

Trusted by 150k+ orgs
  • Revolut
  • n8n
  • Lovable
  • Deel
  • Prove
  • Omnea