Although it is just three years old, Node.js is gaining traction as an application development platform, letting developers extend JavaScript beyond the browser and into servers. But questions remain ...

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight updates to fix vulnerabilities that could crash millions more websites.

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

If you like Node.js but not its package manager npm, or you want a more secure JavaScript runtime environment than Node.js, you might find the new open source project Deno of interest (the word Deno ...

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra certificates.

Node2Shell flaw lets attackers hijack Node.js servers; KISA urges updates KISA warns of high‑risk Node2Shell bug in Node.js, ...

The Node.js I thought I had updated was actually still running an old version. The cause was that there were three versions ...

The Cybersecurity Administration urged immediate updates to PHP, Node.js and Go after vulnerabilities and an incident involving disclosed private keys.

Bun, an all-in-one JavaScript runtime with enhanced performance, is now available in beta release. Designed to compete with Node.js and Deno, Bun features a native bundler for combining multiple ...