PHP2Shell 漏洞昨晚讓多國政府機關與大型服務緊急預防性下線，同時間還爆發 Node.js 與 eMudhra 憑證問題。本文整理一般讀者這幾週瀏覽網站時，該提防哪些事？ （前情提要：OpenAI GPT‑5.6 Sol 揪出 PHP 重大漏洞！影響約七成網站、砸 10 億美元補貼防守端） 先說結論：手機和電腦不必另外裝任何東西，但接下來幾週上網，要多提防釣魚信、假的更新畫面和不熟的網店結帳 ...

Node.js 26.x, 24.x and 22.x get High-rated fixes on or shortly after November 11; CVE details stay private until release.

Node.js 專案於 2026 年 10 月 21 日發布安全更新，同時修補 26.x、24.x 與 22.x 三條仍在支援中的版本線，共處理 10 個 CVE，其中 4 個為高風險（High）、3 個中風險（Medium）、3 個低風險（Low）。官方公告明確指出，三條版本線各自修補的最高嚴重度都是 ...

The Node.js project has scheduled security updates for its 22.x, 24.x, and 26.x release lines on or shortly after Wednesday, November 11, 2026.

Node.js 於台北時間 10 月 21 日發布安全更新，現行分支 26.x、24.x、22.x 分別升級至 26.12.1、24.22.1、22.23.4，一次修復 10 項漏洞（4 高、3 中、3 低），最高嚴重度為 HIGH。

Summary of this articleHTTP2Shell is a critical vulnerability in the data compression technology "Brotli" that may affect applications and web servers using Node.js and Python. Response is primarily ...

What runs on the screens of websites and web services is JavaScript inside the viewer's browser. However, during the development phase of those pages, "Node.js," which runs outside the browser, is ...

Node2Shell漏洞存在於Brotli解壓縮程式庫，除了Node.js，其他開發工具及應用程式也可能受到影響。由於部分軟體自行內建Brotli元件，即使企業已更新Node.js，仍需確認其他軟體是否使用尚未修補的版本 ...

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra certificates.

v3.x of this library is a ground-up rewrite of the SDK, using code generation from our OpenAPI spec. This package should be in a usable state for many projects, but expect frequent minor breaking ...