tl;dr Untrusted data passed into unserialize() function  in node-serialize module can be exploited to achieve arbitrary code execution by passing a serialized JavaScript Object with an Immediately invoked function expression (IIFE). The Bug During a Node. (more…)

@nodejs/ctc @nodejs/tsc - We have discussed this for quite some time now. There is little continued reason for the TSC and CTC to continue as separate entities. I propose that we merge the CTC and ... (more…)

Node.js just launched support (v8.8.1) for HTTP/2 as part of their core. In this post, we will create a simple HTTP/2 server to serve static files and then demonstrate some cool features like HTTP/2 PUSH. (more…)

“19 things I learnt reading the NodeJS docs” is published by David Gilbertson...

This is a statement from Mikeal Rogers, community organizer of the Node.js Foundation, from a recent interview with the New Stack. This is someone who has been involved with Node.js, hands on, since it was released. You can check out the New Stack intervi... (more…)