Several security vulnerabilities, some classified as high-risk, have been discovered in the popular JavaScript runtime ...

Node.js released updates fixing a critical DoS flaw caused by async_hooks stack crashes, tracked as CVE-2025-59466, impacting ...

InvisibleJS是一款利用不可见零宽度Unicode字符隐藏JavaScript代码的新型开源工具，其潜在恶意用途已引发安全警报。该工具由开发者oscarmine托管在GitHub上，采用隐写术技术将源代码嵌入看似空白的文件中。 工作原理 ...

Finding the right talent in the tech industry is rarely a simple task, but sourcing high-quality Node.js developers can feel ...

A jsPDF vulnerability tracked as CVE-2025-68428 could allow attackers to read arbitrary files, exposing configurations and ...

With @platformatic/php-node you can run PHP applications within the same process as a Node.js application, allowing for communication between Node.js and PHP without any network connection in the ...

IT之家 1 月 8 日消息，科技媒体 bleepingcomputer 昨日（1 月 7 日）发布博文，报道称广泛使用的 JavaScript PDF 生成库 jsPDF 近期报告严重安全漏洞（CVE-2025-68428），CVSS 评分高达 9 ...

IT之家 1 月 8 日消息，科技媒体 bleepingcomputer 昨日（1 月 7 日）发布博文，报道称广泛使用的 JavaScript PDF 生成库 jsPDF 近期报告严重安全漏洞（CVE-2025-68428）， CVSS 评分高达 ...

The jsPDF library for generating PDF documents in JavaScript applications is vulnerable to a critical vulnerability that ...

A critical CVSS 9.2 flaw in AdonisJS bodyparser lets attackers write arbitrary files via path traversal when uploads are ...

Bun （一个快速全能的JavaScript运行环境）现已发布 1.3 版本。此次更新堪称迄今为止最大的一个版本，不仅实现了全栈开发能力，还推出了统一的数据库 API，并显著提升了运行时的整体性能。 Bun 1.3 ...