Cyber Security News

Node.js Releases Security Updates to Fix High-Severity TLS, DNS and Brotli Vulnerabilities

Node.js patched 10 vulnerabilities across versions 26.x, 24.x, and 22.x, including four high-severity flaws affecting DNS, ...

Node.js creator ditches Deno to work on open source Cloudflare Workers

For Cloudflare, the Deno buy is an acquihire for Dahl and 12 of his Deno colleagues, who will work to build out Cloudflare’s ...

Node.js 24 and 26 take about 100 seconds to recover memory after a load—Measuring V8's memory reducer with Docker memory limits

Issue #66564 in nodejs/node reports that in Node.js 24 and 26, memory does not return for about 100 seconds even in an idle ...
Cyber Security News

Node.js ImageResponse Implementation Vulnerability Enables Remote Code Execution

A critical Next.js flaw could allow remote code execution via the Node.js ImageResponse implementation in next/og.

How many seconds does Node.js fetch take to fail? Measuring on Node 22, 24, and 26 shows both headers and body take about 300 seconds, and the npm u…

I measured the number of seconds it takes for Node.js's built-in fetch to fail after waiting for a server response, using the ...
DigitalToday

Cloudflare to acquire Deno founded by Node.js developer

Cloudflare will acquire Deno, a company co-founded by Node.js developer Ryan Dahl (라이언 달), TheNewsStack reported on Oct. 9 ...
The Hacker News

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. According to a new report published by the Symantec Threat Hunter ...
FT Markets

Cloudways Launches Velocity for Managed Node.js Hosting With Flat Predictable Pricing for Developers and Agencies

Velocity supports Server-Side Rendered (SSR) and Client-Side Rendered (CSR) applications, alongside Express-based API backends and Next.JS®. Git-based deployment and framework-specific onboarding help ...