Node.js 於台北時間 10 月 21 日發布安全更新，現行分支 26.x、24.x、22.x 分別升級至 26.12.1、24.22.1、22.23.4，一次修復 10 項漏洞（4 高、3 中、3 低），最高嚴重度為 HIGH。

PHP 昨日揭露新漏洞 CVE-2026-115560。官方說要三個條件同時成立才會中，預設設定不符合；但目前還沒有修補版，尚未關掉 session 上傳進度的站長，建議現在補上。 （前情提要：OpenAI GPT‑5.6 Sol 揪出 PHP 重大漏洞！影響約七成網站、砸 10 億美元補貼防守端） 這次 PHP 在 10 月 24 日揭露的新漏洞 CVE-2026-115560，和兩天前的 PH ...

Backend validation protects data quality, strengthens API security and improves reliability. Read why frontend checks alone ...

What runs on the screens of websites and web services is JavaScript inside the viewer's browser. However, during the development phase of those pages, "Node.js," which runs outside the browser, is ...

The Node.js project has scheduled security updates for its 22.x, 24.x, and 26.x release lines on or shortly after Wednesday, November 11, 2026.

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

Node.js patched 10 vulnerabilities across versions 26.x, 24.x, and 22.x, including four high-severity flaws affecting DNS, TLS, and Brotli decompression.

Oskar Holm explains how gaming backends that generate large AI images can stream objects into S3-compatible storage, control ...

Pierce argues that Node.js teams should pick object storage by the failures they can recover from, weighing retries, private ...

A security update released October 21 fixes ten vulnerabilities across Node.js 26.x, 24.x, and 22.x, including an out-of-bounds write in the Brotli decompression library.

Node.js 26.12.1, 24.22.1 and 22.23.4 fix TLS verification bypasses, a Brotli decoder bug and a repeated-random-value issue in snapshots. Here is what to check after updating, from TLS connections to ...

Researchers have developed and evaluated an Ethereum-based framework using ERC-721 standards and decentralized storage to ...