#nodejs

Node.js 26 “Lithium” is now Long Term Support 🎉 v26.13.0 is out, with updates through April 2029. Heads-up for Linux users coming from an earlier LTS: libatomic may need to be installed separately.

Node.js 24.22.2 “Krypton” (LTS) is here! 🚀 Includes V8 backports and a fix that keeps async context in parked stream writes. 🔗 Full changelog and download links:

🛑 ALERT - Node2Shell RCE exploit works on an official Node.js build. Researchers demonstrated how crafted Brotli data can trigger code execution through vulnerable Node.js applications, without modifying the runtime. Here's how the exploit works:

Important security update in #nodejs 8. Please update now. This does not affect the Node.js 4 or 6 LTS release lines

Node.js Developer Roadmap: Master Node.js by Following This Roadmap ☞ #nodejs #node #javascript

🔐 Node.js security updates are now available! New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues. Review the details and update your systems to stay secure. 🔗 #NodeJS #Security

🚀 Introducing the Node adapter, new in NestJS 12.3. Nest has always stood on Express or Fastify. Now it stands on its own, right on node:http: the fastest way to run Nest. Nest is the fast part of your requests. NestJS Observe shows you the rest.

📝The largest #nodejs best practices list. Curated from the top ranked articles and consistently updated:

Last week I had a chance to optimize node.js zlib module. All of my investigations are done with Grok 4.7. To summarize, everything should be 2x faster now.

🚀 Today’s progress: Completed backend development and frontend API fetching for my Twitter Clone! Learning by building, one step at a time. 💻🔥 #MERNStack #ReactJS #NodeJS #WebDevelopment

What was the first #Nodejs project you worked on? 🧐

#nodejs is on 🔥with more than 39,000 ⭐️s on GitHub, 8.8 million users, and 3 billion npm packages downloaded per week

🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic. • .NET: patched by Microsoft • FFmpeg: hit via a crafted JPEG XL image • ClickHouse: one request crashes it, fix not yet released • Apache Arrow: no fix yet Details ↓

Backend developers: Node.js or Go? Which one would you use for a new startup?

If you're looking at an updated Node.js, and calling CVE-2026-111497 done? We have some bad news: We likely don't even know the true scale of "Node2Shell" yet. Node patched CVE-2026-111497 on Oct 21. But the CVE wasn't in Node, it was in Brotli. So our researchers Diptendu Kar and Kurt Boberg went looking for every other package that bundles the same vulnerable Brotli decoder. Here's what we found 433 package entries across 12 ecosystems not great but the absolute worse part: Many of them don't even have fixes available yet. Now are they all reachable and exploitable? Probably not, we're finding out. But the important part: Node isn't the only affected runtime or package, not even close. We're working through the list to manually verify each one but so far we're looking at a 71% no fix yet rate, of the fixes most are still in alpha/early releases. The problem is most implementations aren't even called "brotli." The decoder is compiled into other runtimes like Chromium. 38 entries bundle Brotli older than 1.0.3. Some of those copies date to 2016, and of course are vulnerable to more than just this CVE. And there's no easy well to tell if you're affected. For example, 19 are WebAssembly builds, where memory corruption exists, but stays inside the sandbox. Some require explicit configurations to enable Brotli compression and they aren't on by default. But it's not obvious unless you are looking for it and testing for it. We're going to keep validating (and producing rules), but it's going to be a rough weekend for incident responders.

Best YouTube Playlists to learn Programming: C C++ Python Java C# SQL Go PHP Swift Kotlin Dart Ruby Rust TypeScript R React Next.js Node.js HTML/CSS Machine Learning Deep Learning DSA Follow @Arina_sharmi for more

I spent time trying to build with Node.js without constantly looking at a tutorial. And honestly, it humbled me. 😂 So far, I've built: A simple server A digital business card A quote API But getting them to work wasn't as smooth as I imagined. I tried writing code from memory. I forgot things. Bugs showed up. I had to Google errors, revisit things I'd learned, and figure out what I was doing wrong. One mistake I won't forget anytime soon? I forgot to add res.end() to my response. My API wasn't returning anything, and I had to figure out why. 😅 It was a small mistake, but it reminded me that sometimes, you can understand a concept while learning it and still forget an important detail when you're building on your own. But I kept debugging, searching, and trying again until I got the result I wanted. And that feeling when your code finally works after you've been struggling with it? Sweet. 😂 I'm learning that the goal isn't to remember every line of code perfectly. It's to understand what I'm building, know how to investigate problems, and keep improving when things don't work. I'm still at the beginning of this backend journey, but at least I'm no longer just watching someone else build. I'm building too. And I'm learning along the way. 🚀 For the developers here, what's one small bug or mistake that taught you a lesson you never forgot?

🚨 CRITICAL SECURITY ALERT PHP, GitLab & Node.js were already facing serious security vulnerabilities. Now, Linux, Python & Java are also in the spotlight. The potential impact across the tech stack is huge.

Hiring Alert ! Full Stack AI Engineer urgently needed. ( To Resume Immediately ) Pay: $3500/month Tech Stack: Node.js, TypeScript, NestJS, Express.js, React.js, Next.js, OpenAI API, LangChain.js, RAG, Vector Databases, PostgreSQL, MongoDB, Redis, Docker, Kubernetes, AWS, GitHub Actions, Jenkins, Git, GitHub. Job Mode: Full Time Remote Role Share your best project link and resume link in the comments. J

Here's a little "sneak peek" at what's coming soon to @nestframework CLI 🚀 Generate CRUD (GraphQL, REST, WS) boilerplate with just a single command 🔥🎉 #nestjs #nodejs #javascript