Vulnerabilities
Node.js Brotli Decompression Bug Enables Remote Code Execution Risks
An out-of-bounds write in Node.js bundled Brotli code poses high-severity remote execution risks across all supported release lines, requiring immediate updates.
Node.js
Everything Firewall Chronicle has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Prototype Pollution in toml-node Allows Remote Object Corruption
A flaw in toml-node before 5.0.1 lets attackers inject properties into Object.prototype, risking data corruption across Node.js applications.