Node.js: 5 vulnerabilities found, update now

9 pointsposted 7 hours ago
by danfritz

2 Comments

rvz

6 hours ago

Another day, another disaster:

So in just a single 1 week:

1. Google Cloud Outage [0]

2. eMudhra CA private key Leak [1]

3. PingCap TiDB 10.6 TB data Leak [2]

4. PHP2Shell RCE [3]

5. LiteLLM compromise round 2 [4]

6. GitLab Unauthenticated RCE [5]

7. Railway Security Breach [6]

Now four CVEs that have a high criticality with one of them being a remote code execution risk.

[0] https://news.ycombinator.com/item?id=50163961

[1] https://news.ycombinator.com/item?id=50166579

[2] https://news.ycombinator.com/item?id=50173716

[3] https://news.ycombinator.com/item?id=50180836

[4] https://news.ycombinator.com/item?id=50181114

[5] https://news.ycombinator.com/item?id=50185869

[6] https://news.ycombinator.com/item?id=50188228

CH-Abhinav

6 hours ago

I guess we are kinda cooked right now aren't we ?

On top of all this Usage of AI is making things even more worse which we will pay in near future.