Vulnerabilities
Unauthenticated Request Can Crash Qwik Servers Before 1.20.0
A high-severity flaw in Qwik allows attackers to crash servers with one request. Fixes are available for specific npm packages.
Node.js
Everything Patch Observer has reported about Node.js: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Organisations urged to patch Node.js office-converter CVE-2020-37282 critical remote command execution flaw immediately
A critical vulnerability in the Node.js office-converter library allows remote command execution, requiring immediate attention for versions up to 1.0.2.
Vulnerabilities
Organisations at Risk: fast-jwt Patch Restores Critical Token Forgery Flaw in 6.2.x
A patch for the popular Node.js library inadvertently restored a critical flaw, allowing attackers to forge tokens using public keys as secrets.