Node upgrade broke your app? Fixes for NODE_MODULE_VERSION errors, missing _stream_readable, writeHeader, removed flags and ...

Node.js 26.13.1, 24.22.3 and 22.23.5 fix seven High-rated HTTP/2 and TLS flaws that unauthenticated clients can trigger.

Node.js patched 16 flaws in versions 22.x, 24.x and 26.x. Some can leak TLS private keys or crash servers. Here is what to ...

Do you have any servers or tools running on Node.js? A security update has been released for Node.js versions 22, 24, and 26, which includes 7 HIGH severity issues. The most serious one is that, ...

Node.js fixed 16 vulnerabilities across three supported lines, including HTTP/2 server crashes and HTTPS memory disclosure.

An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.

Node.js 26.x, 24.x and 22.x get High-rated fixes on or shortly after November 11; CVE details stay private until release.

CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...

Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.

Node2Shell exploits a high-severity memory flaw in Node.js’s Brotli decoder to execute attacker-controlled code.

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...