全球70%網站使用的編程語言“PHP”之後，主要網絡服務運行工具“Node.js”也被曝存在致命安全漏洞。黑客無需密碼，僅發送一個經過構造的壓縮文件，即可遠程控制服務器。

Node.js 於台北時間 10 月 21 日發布安全更新，現行分支 26.x、24.x、22.x 分別升級至 26.12.1、24.22.1、22.23.4，一次修復 10 項漏洞（4 高、3 中、3 低），最高嚴重度為 HIGH。

Node.js 專案於 2026 年 10 月 21 日發布安全更新，同時修補 26.x、24.x 與 22.x 三條仍在支援中的版本線，共處理 10 個 CVE，其中 4 個為高風險（High）、3 個中風險（Medium）、3 個低風險（Low）。官方公告明確指出，三條版本線各自修補的最高嚴重度都是 ...

What runs on the screens of websites and web services is JavaScript inside the viewer's browser. However, during the development phase of those pages, "Node.js," which runs outside the browser, is ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight updates to fix vulnerabilities that could crash millions more websites.

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra certificates.

The latest trends and issues around the use of open source software in the enterprise. The OpenJS Foundation is getting its party hat on – Node.js 21 has arrived. Node.js an asynchronous event-driven ...

This section outlines the scope of support for various runtime environments in Supabase JavaScript client. When a Node.js version reaches end-of-life and is no longer in Active LTS or Maintenance ...

This article explains how Azure Pipelines works with JavaScript apps. Microsoft-hosted agents preinstall common JavaScript build, test, and deployment tools like npm, Node.js, Yarn, and Gulp without ...