The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
xenospectrum

Cloudflare's Rust-Based TypeScript Compiler tsrs Cuts Type-Checking Time by Up to 8x in Early Tests

Cloudflare is co-developing tsrs, a Rust port of TypeScript. This article examines the conditions behind the early 8x ...

A security update for Node.js has been released, so I updated it on my Mac (starting with how to check if it applies to you)

On October 21, 2026, a security update was released for Node.js (a foundation for running JavaScript programs on a Mac).Many ...