Node.js has just released fixes for 10 security vulnerabilities that could put node-powered applications at risk and is urging everyone to update their systems.
I run a la. Not even a full lamp. Its just a slack box with base apache html.
For years i’ve been mocked. But that bitch has never been compromised and it’s damned near impossible. Who’s laughing now.
What does it do? Serve pictures of cats?
mostly your mum
Why are people mad? These issues existed and now they don’t. It’s not like the researchers created them
“If you don’t test for them, the numbers will go down” - President Trump on COVID-19.
I mean I’ll update my Node version, but until someone actually finds an exploit chain on a real system (instead of a vibecoded PoC) I don’t see any reason to panic. All these "could"s and "would"s in the article suggest that it’s kind of a nothing-burger imo
I’ll bet this is another “AI found a known vulnerability so people are making a big deal about it” like the PHP one.
Has pure HTML (no css, no javascript) ever had a serious security issue? On the server side obviously not (outside of the apache/nginx/etc. having application bugs), but even on the client side has there ever been an exploit?
I think there’s been one or two image decompression exploits over the years, so a site with a malicious file could end up running code on your system. I remember this being an issue with Minecraft clients and player skins at one point, but I can’t remember any specific times this happened in browsers tho.
Nothing wrong with static sites!
That would be the best result if everyone just went back to static sites.
Berkshire Hathaway website is html.
but what about vulnerabilities in the web server? 😱
Just staple your website to a telephone pole
How many apocalyptic security flaws can fit into a week?
I never noticed how long the sales guy’s hand is
