tl;dr Untrusted data passed into unserialize() function  in node-serialize module can be exploited to achieve arbitrary code execution by passing a serialized JavaScript Object with an Immediately invoked function expression (IIFE). The Bug During a Node. (more…)

crypto-async - Native Cipher, Hash, and HMAC operations executed in Node's threadpool for multi-core throughput.

As you know (as it is posted a dozen times a day), Javascript is a single-threaded language. Thus, we will have a single thread serving all of our requests in our Node.js server unless we specifically play around this. This can cause some troubles that yo... (more…)

An appropriate representation of the requested resource could not be found on this server. (more…)

Node.js® is a JavaScript runtime built on Chrome's V8 JavaScript engine. (more…)