Two critical authentication-bypass vulns in the JavaScript `xml-crypto` module have been disclosed.
If you use `node-saml` or `passport-saml` which use it for XML handling, you should upgrade immediately.

Two critical authentication-bypass vulns in the JavaScript `xml-crypto` module have been disclosed.
If you use `node-saml` or `passport-saml` which use it for XML handling, you should upgrade immediately.
New Kitten release
• Socket routes now have precendence in the router.
This stops wildcard page routes from capturing the default socket routes that Kitten creates to enable the Streaming HTML workflow.
e.g., Previously, the following route:
/videos/index_[slug].page.js
Could not connect to its default socket (/videos/default.socket) because default.socket would be captured by the [slug] parameter.
Now, it will work as intended as the /videos/default.socket (a socket route) has precendence over index_[slug].page.js (a page route).
Learn more about Kitten’s Streaming HTML workflow here:
https://kitten.small-web.org/tutorials/streaming-html/
Enjoy!
Set up a secure and performant Node.js server https://chat-to.dev/post?id=NHJISk5iVG9jaElmaTdqMHdac1Vqdz09 #nodejs #backend #server #javascript #programming
L’objectif est de faciliter le partage d’informations et d’activités.
Cela inclut l’automatisation de l’accueil des nvx membres, la mise en place de forums et chats, un calendrier, un système de petites annonces, des outils pour le reporting des activités, des outils de veille sur des flux RSS ainsi que des interconnexions entre assos et à des sites voisins.
Intéressé ?
#association #ethiciel #loi1901 #projet #dev #linux #python #php #nodejs #typescript #rust avec l'aide des #chatonsorg
Here's how Deno's built-in OTel support can immediately add logs and traces to any Node.js backend
Retrieval-augmented generation with Node.js, Podman AI Lab & React
https://developers.redhat.com/articles/2025/03/10/retrieval-augmented-generation-nodejs-podman-ai-lab-react
#podmanDesktop #AILab #aiml #nodejs
Here it is folks https://github.com/signalapp/node-sqlcipher
A sqlcipher (encrypted sqlite) npm package:
- Built on N-API so it doesn't have to be recompiled
- Fully synchronous so that you can write your transaction without worries, and spread the work across threads as you like
- A bit faster than better-sqlite3 on SELECT queries (I used a special trick ), and about the same on INSERTs
Bonus:
It includes a custom FTS5 tokenizer that we use for tokenizing non-english queries (think CJK)
Big news for npm users!
Socket and @sealsecurity_io collaborated on resolving a critical 3-year-old npm overrides bug, and the fix just shipped in version 11.2.0. →
http://socket.dev/blog/npm-overrides-bug-fixed #NodeJS #JavaScript
Top Benefits of Choosing Node.js for High-Performance Applications
https://lightroomapks.org/top-benefits-of-choosing-node-js-for-high-performance-applications/
Discover the key benefits of using Node.js for high-performance applications, including speed, scalability, and real-time capabilities. Optimize your web apps with its efficient, event-driven architecture.
#NodeJS
#HighPerformance
#WebDevelopment
#ScalableApps
#JavaScript
#BackendDevelopment
#RealTimeApps
#TechForBusiness
#FastDevelopment
#FullStackDevelopment
#SoftwareEngineering
#TechTrends
I am once again faced with the bleak irony of people who like to code in the terminal with Vim or Nano, but also install onto their computer some 5 or 10 apps via FlatPak or Docker, including VSCode, each installed with their own entire copies of Node.js and Electron.js (differing only in their minor revision number), while also complaining about Emacs being “bloated” because it ships with a miniature web browser and fully-featured e-mail client.
How to Install #PeerTube on #Ubuntu VPS
This article provides an in-depth guide demonstrating how to install PeerTube on Ubuntu VPS.
What is PeerTube?
PeerTube is a decentralized, federated video hosting platform powered by WebTorrent and ActivityPub. It enables users to self-host video services and interact with other ...
Keep reading https://blog.radwebhosting.com/how-to-install-peertube-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=ReviveOldPost #installguide #opensource #decentralized #selfhosting #letsencrypt #vpsguide #selfhosted #videostreaming #fediverse #nodejs
Install latest version of node.js on Ubuntu 24.10 #softwareinstallation #nodejs #npm
Wrote an MCP module to connect Claude Code AI to the physical world.
What's the worst that can happen?
A guide on "how you can switch between different versions of Node.js", covering NVM, a Windows version of the tool, and a Rust-based alternative, Volta. #NodeJS #JavaScript https://blog.logrocket.com/how-switch-node-js-versions-nvm/
Launched a hosting platform optimized for Django deployment
Discussions: https://discu.eu/q/https://leapcell.io/
The Node team has officially shipped TypeScript native support in Node 23.6! Developers can now run TypeScript files without any extra configuration or flags.
This feature is now stable.
Read more on #InfoQ https://bit.ly/43CMgCF
Unpopular opinion warning!
All fetch() Wrappers are flawed.
https://webjose.hashnode.dev/the-ugly-truth-all-popular-fetch-wrappers-do-it-wrong