#nodeJS

Node.js 24.22.2 “Krypton” (LTS) is here! 🚀 Includes V8 backports and a fix that keeps async context in parked stream writes. 🔗 Full changelog and download links:

🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic. • .NET: patched by Microsoft • FFmpeg: hit via a crafted JPEG XL image • ClickHouse: one request crashes it, fix not yet released • Apache Arrow: no fix yet Details ↓

🚨 UPDATE: Node2Shell (CVE-2026-111497) has moved from PoC to the wild. Scanning is live and the first exploit attempts are out. The RCE is now confirmed on STOCK x86-64 Node.js, not just arm64. Patch now → 22.23.4 / 24.22.1 / 26.12.1 Read ↓

Node.js 26 “Lithium” is now Long Term Support 🎉 v26.13.0 is out, with updates through April 2029. Heads-up for Linux users coming from an earlier LTS: libatomic may need to be installed separately.

🔐 Node.js security updates are now available! New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues. Review the details and update your systems to stay secure. 🔗 #NodeJS #Security

Node.js 27 Alpha is out! 💚 First release of the new model: Alpha until April, Current on 2027-04 and LTS on 2027-10. What's new: * V8 15.6 🚀 * OpenSSL 4.1, npm 12.1 * --allow-env permission 🔍 * Native fs.glob, net/promises ⚡ * domain deprecated

🚀 Introducing the Node adapter, new in NestJS 12.3. Nest has always stood on Express or Fastify. Now it stands on its own, right on node:http: the fastest way to run Nest. Nest is the fast part of your requests. NestJS Observe shows you the rest.

Ever wonder why your Node.js app chokes under heavy load while your multi-core CPU sits almost completely idle? Most devs treat single-threaded limits as just part of the deal. They aren't. Read more here: #nodejs #SoftwareEngineering #javascript

⚠️ Compartimos desde la Agencia Nacional de Ciberseguridad (#ANCI) información de parches de seguridad publicados para resolver vulnerabilidades en #NodeJS 26.x, 24.x y 22.x. Más información:

I love how quickly our team works to bring the latest LTS and security upgrades for @nodejs. Should be a nice performance boost given 𝚏𝚎𝚝𝚌𝚑 now uses HTTP/2 by default, and agents produce a lot of network traffic

Node.js 26 LTS is now available on Vercel. ▪︎ Default for all new projects ▪︎ HTTP/2 by default for built-in 𝚏𝚎𝚝𝚌𝚑 ▪︎ Temporal API for dates and time zones ▪︎ V8 14.6 JavaScript engine

🚨 On 10/21/26, the Node.js Project published a security advisory for CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js. The vuln has the potential to disclose memory or enable RCE. More in our blog:

I spent time trying to build with Node.js without constantly looking at a tutorial. And honestly, it humbled me. 😂 So far, I've built: A simple server A digital business card A quote API But getting them to work wasn't as smooth as I imagined. I tried writing code from memory. I forgot things. Bugs showed up. I had to Google errors, revisit things I'd learned, and figure out what I was doing wrong. One mistake I won't forget anytime soon? I forgot to add res.end() to my response. My API wasn't returning anything, and I had to figure out why. 😅 It was a small mistake, but it reminded me that sometimes, you can understand a concept while learning it and still forget an important detail when you're building on your own. But I kept debugging, searching, and trying again until I got the result I wanted. And that feeling when your code finally works after you've been struggling with it? Sweet. 😂 I'm learning that the goal isn't to remember every line of code perfectly. It's to understand what I'm building, know how to investigate problems, and keep improving when things don't work. I'm still at the beginning of this backend journey, but at least I'm no longer just watching someone else build. I'm building too. And I'm learning along the way. 🚀 For the developers here, what's one small bug or mistake that taught you a lesson you never forgot?

A high-severity Node.js vulnerability could risk your application security. 🔐 Update to a secure version, prevent potential threats, and keep your systems protected. 🛡️ #wingstechsolutions #NodeJS #NodeJSSecurity #CyberSecurity #SecurityAlert #SoftwareSecurity #WebDevelopment

Your zero-downtime reload is dropping payments if Nginx routes traffic before Node warms up its DB pool. Use a real health check first. How do you handle zero-downtime deploys? #backend #nodejs

Hiring Alert ! Full Stack AI Engineer urgently needed. ( To Resume Immediately ) Pay: $3500/month Tech Stack: Node.js, TypeScript, NestJS, Express.js, React.js, Next.js, OpenAI API, LangChain.js, RAG, Vector Databases, PostgreSQL, MongoDB, Redis, Docker, Kubernetes, AWS, GitHub Actions, Jenkins, Git, GitHub. Job Mode: Full Time Remote Role Share your best project link and resume link in the comments. J

How to Create Microservices in Nodejs with Mongo DB #Microservices #Nodejs #MongoDB #NodejsMicroservices

🚨 Node2Shell (CVE-2026-111497) is here. We're ALREADY teaching you how to exploit it ⚡A Node.js Brotli decoder bug can lead to unauthenticated RCE. Our NEW threat room lets you exploit, detect & patch it yourself. 🔥 🔗

Neue Sicherheitslücke: Broccoli2Shell Eine kritische RCE-Sicherheitslücke im Brotli-Decoder betrifft Node.js, Python & Co. Angreifer können über präparierte Daten Remote Code Execution ausführen! 💥 #CyberSecurity #NodeJS #DevOps #InfoSec #Broccoli2Shell

Your backend needs to handle 100,000 requests per second. Which framework are you trusting? A. Node.js + Express B. Python + FastAPI C. Go + Gin D. Java + Spring Boot