IT之家 10 月 21 日消息，开源 JavaScript 运行时环境 Node.js 今日针对 26.x、24.x 和 22.x 系列版本发布安全更新，修复 10 余个安全漏洞，包含 4 个高危漏洞。 IT之家附本次更新修复漏洞如下： 该漏洞影响 ...

IT时代网10月21日消息，开源JavaScript运行时环境Node.js今日针对26.x、24.x和22.x三个系列版本发布安全更新，累计修复10余个安全漏洞，其中4个为高危漏洞，官方建议用户尽快升级。本次更新覆盖三条主力版本线，绝大多数漏洞同时影响26.x、24.x和22.x。其中最受关注的一处缺陷位于Brotli解码器，该组件在特定情况下可能发生 ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

近日公开的一个高危漏洞出现在谷歌开发的流行压缩库中，影响远不止开源的Node.js JavaScript运行时，澳大利亚安全研究员发现了这一点。 OpenSourceMalware的联合创始人兼首席技术官Paul McCarty对多个软件生态系统中的开发者工具和库进行了调查，这些生态系统实现或集成了谷歌的Brotli解压缩，以寻找对底层漏洞的暴露情况。 他确认了一系列可能受影响的软件，涵盖了多个常 ...

Node.js is a standard server-side JavaScript runtime used by many companies, including Netflix and LinkedIn. According to W3Techs data, it is used by approximately 7.4% of websites with known web ...

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...

The OpenJS Foundation today announced the release of Node.js 21, the latest release line of the open-source, cross-platform JavaScript runtime environment and library for running web applications ...

【本文由小黑盒作者@临河送舟于10月22日发布】 跑JavaScript的项目里，node.js和npm都是必不可少的工具 前言 ...

The latest trends and issues around the use of open source software in the enterprise. The OpenJS Foundation is getting its party hat on – Node.js 21 has arrived. Node.js an asynchronous event-driven ...

For Cloudflare, the Deno buy is an acquihire for Dahl and 12 of his Deno colleagues, who will work to build out Cloudflare’s ...