Cybernews

PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...

Node.js fixes its own and inherited security vulnerabilities

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...

A security update for Node.js has been released, so I updated it on my Mac (starting with how to check if it applies to you)

On October 21, 2026, a security update was released for Node.js (a foundation for running JavaScript programs on a Mac).Many ...
The Hacker News

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

Emergency Node.js Update: First, Identify the 'Version in Use' — October 21 Security Release

On October 21, the Node.js project released security updates for versions 22.x, 24.x, and 26.x. Each branch contains ...
InfoWorld

Node.js 22 arrives, backs ECMAScript modules

The latest Node release includes require() support for ES modules, improved WebSocket communications, and an update to Google's V8 JavaScript engine 2.4. Node.js 22 ...