Node.js fixes its own and inherited security vulnerabilities

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...
ZDNet

Microsoft: Learn JavaScript Node.js with this new free course

Microsoft has pumped out 26 new short videos on YouTube offering beginners a path to learn about Node.js, the server-side JavaScript runtime environment for building ...
The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

[Urgent] Node.js vulnerability: Proof-of-concept exploit released the day after the patch. What to do now by role, and future outlook

In my previous article, I organized what to do by role regarding the critical #vulnerability in #PHP. Actually, on that same ...
The Hacker News

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...
techtarget

New JavaScript runtime Bun challenges Deno, Node.js

Bun, an all-in-one JavaScript runtime with enhanced performance, is now available in beta release. Designed to compete with Node.js and Deno, Bun features a native bundler for combining multiple ...