news.lavx.hu

A 16-Line WebKit Fix Ended a Promise Hang in Safari and Bun

WebKit bug 318399 caused Safari 26 and Bun 1.3.14 to leave a promise pending when a Symbol.species getter threw during ...
The Hacker News

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data

Node.js fixed 16 vulnerabilities across three supported lines, including HTTP/2 server crashes and HTTPS memory disclosure.
cyberpress

Node.js Fixes 16 Security Flaws Allowing Hackers to Crash Servers and Leak Sensitive Data

The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.

Have you updated Node.js yet? A gentle explanation of 16 fixes, including 7 HIGH severity issues, and a vulnerability (CVE-2026-123864) where HTTPS could expose others' memory

Do you have any servers or tools running on Node.js? A security update has been released for Node.js versions 22, 24, and 26, which includes 7 HIGH severity issues. The most serious one is that, ...
Cyber Security News

Node.js Fixes 16 Security Flaws That Could Expose TLS Private Keys and Crash Servers Remotely

Node.js patched 16 flaws in versions 22.x, 24.x and 26.x. Some can leak TLS private keys or crash servers. Here is what to ...
cyberkendra.com

Node.js Security Update Fixes 16 Flaws, 7 High-Severity

Node.js 26.13.1, 24.22.3 and 22.23.5 fix seven High-rated HTTP/2 and TLS flaws that unauthenticated clients can trigger.
cyberpress

Hacktober 2026: Cyberattacks Hit Binance, Polymarket, PHP, Node.js, and AI Platforms

October’s cybersecurity disclosures spanned cryptocurrency exchanges, web runtimes, AI platforms, software repositories, government records, and supermarkets.
news.lavx.hu

Node.js Middleware Pattern Treats Feature Flags as Immutable Evidence for Support Incident Reconstruction

A new architecture pattern uses request-local middleware to resolve feature flags at a single revision, attach decision context to each request, and make rollbacks idempotent compare-and-swap ...
Cybernews

Google Brotli flaw leaves 90% of the cloud exposed, Wiz finds, as patching scramble continues

New research from cloud security firm Wiz reveals that 91% of cloud environments contain resources vulnerable to CVE-2026-111497, a dangerous flaw in Google’s widely-used Brotli compression technology ...

What is HTTP2Shell? A Beginner's Guide to the Critical Node.js Vulnerability

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...
動區動趨

PHP 又爆新漏洞尚未修補版！官方：風險低，關掉上傳進度最保險

PHP 昨日揭露新漏洞 CVE-2026-115560。官方說要三個條件同時成立才會中，預設設定不符合；但目前還沒有修補版，尚未關掉 session 上傳進度的站長，建議現在補上。 （前情提要：OpenAI GPT‑5.6 Sol 揪出 PHP 重大漏洞！影響約七成網站、砸 10 億美元補貼防守端） 這次 PHP 在 10 月 24 日揭露的新漏洞 CVE-2026-115560，和兩天前的 PH ...