修复措施检测栈溢出错误并将其重新抛给用户代码,而不是将其视为致命错误。该漏洞被追踪为CVE-2025-59466(CVSS评分:7.5)。尽管具有重大的实际影响,但Node.js表示由于以下几个原因,他们将此修复仅视为缓解措施: ...
Node.js has released updates for a high severity vulnerability that could be exploited by attackers to corrupt the process and cause unexpected behaviors, such as application crashes and potentially ...
在2026年1月13日,Node.js官方发布了一项紧急安全更新,针对多个活跃版本中的7个中高危漏洞进行了修复。这次更新涵盖了内存泄漏、拒绝服务(DoS)攻击和权限绕过等风险,官方建议所有受影响的系统尽快升级,以确保安全性。
Node.js released updates fixing a critical DoS flaw caused by async_hooks stack crashes, tracked as CVE-2025-59466, impacting ...
Upgrade to the event-driven JavaScript runtime also updates NPM, enhances unhandled rejections, and adds new methods for working with array buffers Node.js 15.0.0, the latest version of the ...
Node.js 19 has arrived. The latest update to the popular JavaScript runtime enables HTTP Keep-Alive by default, a change that should deliver better web throughput. Accessible from nodejs.org, Node.js ...