While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...
v3.x of this library is a ground-up rewrite of the SDK, using code generation from our OpenAPI spec. This package should be in a usable state for many projects, but expect frequent minor breaking ...
A critical flaw has been discovered in 'Node.js,' which is widely used behind the scenes of web services and applications. It ...
The Node.js Project released security updates on October 21, 2026, addressing ten vulnerabilities across its 26.x, 24.x, and ...
An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
Node.js patched node2shell, CVE-2026-111497, after a Brotli decoder flaw that can trigger crashes, memory leaks, or remote ...
Summary of this articleHTTP2Shell is a critical vulnerability in the data compression technology "Brotli" that may affect applications and web servers using Node.js and Python. Response is primarily ...
Node.js patched 10 vulnerabilities across versions 26.x, 24.x, and 22.x, including four high-severity flaws affecting DNS, ...
Imperva demonstrated code execution via crafted Brotli data on an official Node.js 24.22.0 Linux arm64 image; Node.js has ...
Node2Shell exploits a high-severity memory flaw in Node.js’s Brotli decoder to execute attacker-controlled code.
Results that may be inaccessible to you are currently showing.
Hide inaccessible results