Developer Security

Node2Shell Patch Guide: Fix This 9.2 Node.js Flaw Before It Bites

Node.js fixed a critical Brotli bug on October 21. Here’s which versions are safe, how to check your apps and what else needs updating.

A CVSS 10.0 flaw lets attackers run code on self-managed GitLab servers. Here’s who’s affected and the versions that fix it.

Railway says an unauthorized party may have accessed customer environment variables. Here’s what to rotate first while deployments are paused.