Brotli是常見的網頁資料壓縮格式，Node.js內建的解壓縮功能存在CVE-2026-111497漏洞。程式在解壓縮資料時，可能將內容寫入超出預定範圍的記憶體，造成記憶體資料遭破壞，嚴重時可能讓攻擊者遠端執行程式碼。該漏洞影響三個版本分支，但官方尚未詳細說明攻擊所需條件，也未公布遭實際利用的案例。

資安署指出，Node.js廣泛應用於現代網頁前端工具鏈、後端微服務架構與各類API伺服器。這次Node.js共修補10項資安漏洞，其中4項屬高風險等級。最受矚目的CVE-2026-111497漏洞存在於Brotli解碼器中，因邊界外寫入（Out-of ...

星數兩週成長數十倍，社群出現灌水質疑。可以對照的數據是安裝量： npm 官方下載統計顯示，rea-agents 在 10 月 2 日一天只有 16 次下載，10 月 12 日來到 103,109 次，10 月 16 日至 18 日每天都超過 10 ...

The HackerNoon library is now ranked by reading time created. Start learning by what others read most. There are 5 common ...

Chrome 153/154 bring AI-agent JS execution controls, source inspection, and trace recording to DevTools. Full breakdown of ...

Learn how to install and use Awesome Agent Skills with Claude Code, Codex, Gemini CLI, and Cursor to improve AI-assisted ...

Set up a self-hosted AI coding assistant with Qwen Code and OpenCode in 12 steps, including local models and security ...

Component libraries help frontend teams reuse UIs, enforce design tokens, ship faster, maintain consistency, and scale ...

Recently, I have been using AI more and more in my work.Previously, I wrote in this note about how I want to 'hand over work ...

Rebooting the Enthusiasm of Those Days with Modern TechnologyFor the generation that was once obsessed with block-breaking ...

AI-generated code statistics for 2026, covering how much code AI writes, developer adoption, speed gains, code quality, ...

Discover 15 best mobile app development tools for 2027, including Flutter, React Native, Firebase, and testing tools, with ...