Node.js: 5 vulnerabilities found, update now

2 comments

• $rvz 6 hours ago

  Another day, another disaster:

  So in just a single 1 week:

  1. Google Cloud Outage [0]

  2. eMudhra CA private key Leak [1]

  3. PingCap TiDB 10.6 TB data Leak [2]

  4. PHP2Shell RCE [3]

  5. LiteLLM compromise round 2 [4]

  6. GitLab Unauthenticated RCE [5]

  7. Railway Security Breach [6]

  Now four CVEs that have a high criticality with one of them being a remote code execution risk.

  [0] https://news.ycombinator.com/item?id=50163961

  [1] https://news.ycombinator.com/item?id=50166579

  [2] https://news.ycombinator.com/item?id=50173716

  [3] https://news.ycombinator.com/item?id=50180836

  [4] https://news.ycombinator.com/item?id=50181114

  [5] https://news.ycombinator.com/item?id=50185869

  [6] https://news.ycombinator.com/item?id=50188228

  [-]
  • $CH-Abhinav 6 hours ago

    I guess we are kinda cooked right now aren't we ?

    On top of all this Usage of AI is making things even more worse which we will pay in near future.