Node.js fixed 16 vulnerabilities across three supported lines, including HTTP/2 server crashes and HTTPS memory disclosure.

The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.

Node.js patched 16 flaws in versions 22.x, 24.x and 26.x. Some can leak TLS private keys or crash servers. Here is what to ...

Summary of this articleHTTP2Shell is a critical vulnerability in the data compression technology "Brotli" that may affect ...

Proof-of-concept for CVE-2026-111497 in Google Brotli 1.0.3–1.2.0 (bundled inside Node.js). CVSS 4.0: 9.2 Critical. Affected: Python brotli 1.0.3–1.2.0 · Node.js 22.x < 22.23.4 · 24.x < 24.22.1 · 26.x ...

A new architecture pattern uses request-local middleware to resolve feature flags at a single revision, attach decision context to each request, and make rollbacks idempotent compare-and-swap ...

Scale Databricks Apps from design to production: set latency targets, keep state recoverable, load test, and size instances, ...

Inspect a local Electron/JavaScript directory or ASAR without executing its code. analyze_javascript_application and the CLI routes below return an Evidence record with the application graph, static ...

When trying to publish a web app on AWS, server and API configuration are often sources of concern.In particular, when building an API using AWS Lambda, a configuration combining Lambda with a service ...

Principal propagation does not feature in the design of which extensions preserve core system authorization and audit trails’ ...

AWS launched Lambda Web Functions and put S3 on the Vercel Marketplace this week. Billing model, regions, and competitive comparison inside.

History, Tower BFT, and Turbine protect the Solana blockchain, and learn key security practices for developers and users.