Emergency Node.js Update: First, Identify the 'Version in Use' — October 21 Security Release

On October 21, the Node.js project released security updates for versions 22.x, 24.x, and 26.x. Each branch contains ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Node.js Vulnerabilities and the eMudhra Certificate Issue: Considering Software Reliability Through Defects Found by AI

The Node.js Brotli vulnerability and the issue surrounding the intermediate certificates of the certificate authority eMudhra ...
The Hacker News

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

Node.js fixes its own and inherited security vulnerabilities

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...
Cybernews

PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...
VentureBeat

Node.js and JS foundations are merging to form OpenJS

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More The Linux Foundation today unveiled several major collaborative ...
Newswire

GreenGeeks Launches Node.js Hosting for Web Apps and AI-Built Projects

Deploy Node.js applications, APIs and backends without managing your own VPSGreenGeeks today announced the launch of Managed Node.js Hosting, giving developers, businesses and AI-assisted builders a ...