全球70%網站使用的編程語言“PHP”之後，主要網絡服務運行工具“Node.js”也被曝存在致命安全漏洞。黑客無需密碼，僅發送一個經過構造的壓縮文件，即可遠程控制服務器。

PHP2Shell 漏洞昨晚讓多國政府機關與大型服務緊急預防性下線，同時間還爆發 Node.js 與 eMudhra 憑證問題。本文整理一般讀者這幾週瀏覽網站時，該提防哪些事？ （前情提要：OpenAI GPT‑5.6 Sol 揪出 PHP 重大漏洞 ...

Node.js 於台北時間 10 月 21 日發布安全更新，現行分支 26.x、24.x、22.x 分別升級至 26.12.1、24.22.1、22.23.4，一次修復 10 項漏洞（4 高、3 中、3 低），最高嚴重度為 HIGH。

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

Node.js 專案於 2026 年 10 月 21 日發布安全更新，同時修補 26.x、24.x 與 22.x 三條仍在支援中的版本線，共處理 10 個 CVE，其中 4 個為高風險（High）、3 個中風險（Medium）、3 個低風險（Low）。官方公告明確指出，三條版本線各自修補的最高嚴重度都是 ...

Node.js is a standard server-side JavaScript runtime used by many companies, including Netflix and LinkedIn. According to W3Techs data, it is used by approximately 7.4% of websites with known web ...

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...

New releases for Node.js 22.x, 24.x and 26.x fix high-severity vulnerabilities and protect against compromised eMudhra ...

The latest trends and issues around the use of open source software in the enterprise. The OpenJS Foundation is getting its party hat on – Node.js 21 has arrived. Node.js an asynchronous event-driven ...

For Cloudflare, the Deno buy is an acquihire for Dahl and 12 of his Deno colleagues, who will work to build out Cloudflare’s ...