Vulnerabilities
How Does Malformed TOML Input Block Node.js Event Loops in toml-node?
A flaw in older toml-node versions allows crafted input to freeze event loops, risking service denial for web applications.
Node.js
Everything SecOps Monitor has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
How Does CVE-2026-107699 Enable Remote Code Execution in ppt2png?
The ppt2png npm package versions up to 0.0.6 contain a critical OS command injection flaw allowing attackers to run arbitrary system commands via unsanitized input.