Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

A high-severity React Server Components DoS flaw lets attackers freeze vulnerable Next.js servers with crafted POST requests.

For Cloudflare, the Deno buy is an acquihire for Dahl and 12 of his Deno colleagues, who will work to build out Cloudflare’s ...

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers. First documented by Fortinet in July ...

Next.js maintainers have released an out-of-band security update addressing two critical remote code execution vulnerabilities and a high-severity denial-of-service flaw.

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...

Node2Shell flaw lets attackers hijack Node.js servers; KISA urges updates KISA warns of high‑risk Node2Shell bug in Node.js, ...

Next.js patched two critical unauthenticated remote code execution flaws and a high-severity flaw that could disrupt ...

Nest.js shines for its modern programming paradigms and modular approach to server-side JavaScript and TypeScript. Here's a hands-on intro to Nest. Not to be confused with Next.js, Nest.js is a newer ...

Could 2026 be the year of the beautiful back end? We explore the range of options for server-side JavaScript development, from Express to Next and all the rest. A grumpy Scrooge of a developer might ...