Node.js fixed 16 vulnerabilities across three supported lines, including HTTP/2 server crashes and HTTPS memory disclosure.

Node.js 26.13.1, 24.22.3 and 22.23.5 fix seven High-rated HTTP/2 and TLS flaws that unauthenticated clients can trigger.

Node upgrade broke your app? Fixes for NODE_MODULE_VERSION errors, missing _stream_readable, writeHeader, removed flags and ...

CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...

Will your skill script run as-is on a different OS?When I rebuilt my sales skill for sale, I had to re-evaluate the language ...

The scalable web crawling and scraping library for JavaScript/Node.js. Enables development of data extraction and web automation jobs (not only) with headless Chrome and Puppeteer. - ...

October’s cybersecurity disclosures spanned cryptocurrency exchanges, web runtimes, AI platforms, software repositories, government records, and supermarkets.

JavaScript Workers with compatibility dates on or after November 17, 2026 will use URL-based module resolution and import.meta by default.

October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

A screen displaying computer code. Image for illustrative purposes. Yonhap News Agency [Financial News] A vulnerability that could allow an external attacker to take control of a server has been found ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...