Node.js has just released fixes for 10 security vulnerabilities that could put node-powered applications at risk and is urging everyone to update their systems.

  • neclimdul@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    18 hours ago

    rihht? opencloud posted a really tacky “nextcloud is dealing with this. checkout open cloud. written in go.”

    dude… do we need to drop a link to the golang cves? they had a critical bug this year.

    ruby? critical regex rce this week.

    nodejs? same.

    php made the news because of the embargo break making it go viral and everyone loving to hate on php. But people in glass houses should be careful throwing stones.

    • treverflume@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      16 hours ago

      How’s Rust holding these days I wonder? Always wished I had learned it when it first came out ha.

      • neclimdul@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        9 hours ago

        Rust itself doesnt get mant CVEs and its been quiet so thats nice.

        its worth noting its a bit different than languages I listed and lower-level. Those languages are also runtimes that provide a large set of features that run with your code.

        That means while you could write websites in Rust, reall it is what you might consider writing PHP in if you started in 2026 not an alternative. Its more closely like MUSL(did get a recent big security release 🙄) or glibc.