What is HTTP2Shell? A Beginner's Guide to the Critical Node.js Vulnerability

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

Node.js October Security Updates: What Happens If You Ignore Them? A Gentle Explanation

"A security update has been released for Node.js."Hearing this, you might feel a bit confused: What is Node.js? Does it ...
Cybernews

PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...
CSOonline

Critical jsPDF vulnerability enables arbitrary file read in Node.js deployments

The path traversal bug allows attackers to include arbitrary filesystem content in generated PDFs when file paths are not properly validated. A now-fixed critical flaw in the jsPDF library could ...
Help Net Security

Pompelmi: Open-source secure file upload scanning for Node.js

Software teams building services in JavaScript are adding more layers of defense to handle untrusted file uploads. An open-source project called Pompelmi aims to insert malware scanning and policy ...
Crypto Briefing

TRON releases mandatory GreatVoyage-v4.8.2.4 upgrade for node operators

TRON released mandatory upgrade GreatVoyage-v4.8.2.4 Empedocles on October 23, 2026, targeting node stability and smart ...