Brotli是常見的網頁資料壓縮格式，Node.js內建的解壓縮功能存在CVE-2026-111497漏洞。程式在解壓縮資料時，可能將內容寫入超出預定範圍的記憶體，造成記憶體資料遭破壞，嚴重時可能讓攻擊者遠端執行程式碼。該漏洞影響三個版本分支，但官方尚未詳細說明攻擊所需條件，也未公布遭實際利用的案例。

PHP開發團隊即將修補的2個重大漏洞，傳出在公布之前就已經曝光！此事引起多家資安公司關注並提出警告，指出這些漏洞就是CVE-2026-109618、CVE-2026-109619，並將它們稱為PHP2Shell ...

知名開源伺服器端腳本語言PHP傳出重大資安警訊，PHP安全團隊於昨（20）日發布公告，預告將於台灣時間今（21）日晚間10時推出緊急安全更新，修補兩個嚴重漏洞。

資助PHP開發與資安工作的PHP基金會（The PHP Foundation）資安工程師Volker Dusch對《華爾街日報》說，這是PHP十多年來面臨過最嚴重的資安問題，他把它比作2014年迫使全球數十萬台伺服器緊急修補的Heartbleed漏洞。

（中央社東京22日綜合外電報導）支撐網際網路運作的程式語言PHP爆嚴重漏洞，全球企業與政府今天加緊腳步搶修，多國銀行、航空、鐵路與政府網站緊急暫停服務，駭客已嘗試攻擊達數百萬次。

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...

Node.js 26.12.1, 24.22.1 and 22.23.4 fix 10 flaws, including Brotli RCE bug CVE-2026-111497 and three TLS hostname bugs.

President Donald Trump will hold a rally in Dubuque ahead of the midterm elections. Trump will speak at an event Sunday, Nov.

When I had a local AI fix my Web game, it ended up becoming unlaunchable. In the 6th installment where I created "Stardust ...

Have you ever thought, "It would be convenient if there were a website like this"? Recently, it has become possible to create ...

Mudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable. What happened, who's affected and ...

Google DeepMind researchers say four Gemini 4 Argon agents beat Minecraft in 27 hours, writing 2,783 programs with no human help.