Update on Brotli vulnerability CVE–2026-111497 (Node2Shell) affecting NodeJS
BetterHelp Logo

BetterHelp

Start your security review
View & download sensitive information
Ask for information
ControlK

Welcome to BetterHelp's BetterHelp. Our commitment to data privacy and security is embedded in every part of our business. Use this BetterHelp to learn about our security posture and request access to our security documentation.
  • CorpCare
  • 15Five
  • Huel
  • Alvotech
  • Canopy Wellbeing
  • Be The Source

Documentation

DOCUMENTATIONTeladoc Corporate Incident Response Plan
Knowledge Base (FAQ)
  • Who will be helping me?
  • Who are the therapists?
  • Is BetterHelp web accessible for disabled users?
  • How can I be sure that this is an effective form of therapy?
  • How does messaging work?
View more

BetterHelp Updates

Update on PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (php2shell)

Vulnerabilities

BetterHelp is aware of the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, which were disclosed on Wednesday, October 21, 2026. Our PHP Production environment has been updated to mitigate these vulnerabilities.

If you have further questions, please reach out to your BetterHelp Enterprise representative. Please feel free to subscribe to this Trust Center for future updates.

Update on Brotli vulnerability CVE–2026-111497 (Node2Shell) affecting NodeJS

Vulnerabilities

BetterHelp is aware of the critical vulnerability CVE–2026-111497 affecting Google’s widely used Brotli decoder that can allow attackers to compromise applications. Our NodeJS production environment has been updated to mitigate this vulnerability.