tl;dr Untrusted data passed into unserialize() function  in node-serialize module can be exploited to achieve arbitrary code execution by passing a serialized JavaScript Object with an Immediately invoked function expression (IIFE). The Bug During a Node. (more…)

Learn how to use the Bcrypt open-source library to hash passwords in a Node.js application. (more…)

Windows 32-bit Installer: https://nodejs.org/dist/v9.2.0/node-v9.2.0-x86.msi Windows 64-bit Installer: https://nodejs.org/dist/v9.2.0/node-v9.2.0-x64.msi Windows 32-bit Binary: https://nodejs.org/dist/v9.2.0/win-x86/node.exe Windows 64-bit Binary: https:/... (more…)

A few minutes ago I opened the initial pull-request that would provide an implementation of HTTP/2 for Node.js core. While it’s far from… (more…)

node-stripe-charge - node + stripe + express + bootstrap 3 (used for one time charges)...