Posts tagged “javascript”

3 posts

23 Oct 2026

Node.js Brotli RCE (CVE-2026-111497): malformed compression input to code execution

CVE-2026-111497 is an OOB write in Node's bundled Brotli decoder plus TLS bypasses. Upgrade to 22.23.4/24.22.1/26.12.1 now.

securitycvenodejsjavascript

04 Dec 2025

React Server Components RCE (CVE-2025-55182): pre-auth deserialization flaw

CVE-2025-55182 gave pre-auth RCE on React Server Components via a crafted payload. Affected packages, patches, and edge mitigations.

securitycvereactjavascript

22 Mar 2025

Next.js middleware bypass (CVE-2025-29927): how one header skipped auth

CVE-2025-29927 let attackers bypass Next.js middleware auth with a spoofed header. What broke, who is affected, and the patch checklist.

securitycvenextjsjavascript

Browse by topic:

2fa accessibility admin adobe-commerce alpine analytics api architecture audit b2b best-practices blueprints bots cache caching catalog checkout ci cicd citrix cli compliance configuration consent content core-web-vitals crawl crushftp csp customization cve database debugging dependencies deploy deployment deserialization detection devops di docker eav ecommerce enterprise erp events file-transfer fortinet fpc frameworks fraud frontend gdpr gitlab go govard graphql hardening headless hyva i18n images indexer integration internals inventory ivanti java javascript laravel layered-navigation layout lcp local-dev magento2 migration modules monitoring msi multistore network nextjs nodejs observability onboarding opensearch orders patch payments performance php plugins pricing profiling pwa quality rce react redis remotes resilience roundcube sap search security seo sessions shipping slo structured-data symfony sync tailwind team testing tomcat upgrade varnish wcag wordpress workflow xdebug zeroday