The Hacker News

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

Emergency Node.js Update: First, Identify the 'Version in Use' — October 21 Security Release

On October 21, the Node.js project released security updates for versions 22.x, 24.x, and 26.x. Each branch contains ...
TechJuice

PKCERT Warns of Critical Node.js Security Flaws & Urges Immediate Patching

PKCERT warns organizations of critical Node.js security flaws. Update immediately to prevent remote code execution and data ...

Node.js Vulnerabilities and the eMudhra Certificate Issue: Considering Software Reliability Through Defects Found by AI

The Node.js Brotli vulnerability and the issue surrounding the intermediate certificates of the certificate authority eMudhra ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Node.js fixes its own and inherited security vulnerabilities

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...
Newswire

GreenGeeks Launches Node.js Hosting for Web Apps and AI-Built Projects

Deploy Node.js applications, APIs and backends without managing your own VPSGreenGeeks today announced the launch of Managed Node.js Hosting, giving developers, businesses and AI-assisted builders a ...
ZDNet

After governance breakdown, Node.js leaders fight for its survival

After years of battling a string of systematic failures of governance and leadership, the Node.js community, one of the largest collectives of software developers on the internet, reached a breaking ...