Node.js has released patches addressing sixteen security flaws, most notably two critical HTTP/2 issues. The first flaw allows unauthenticated clients to trigger a denial-of-service crash, while the second vulnerability can lead to information disclosure by leaking server memory containing responses intended for other connections. Administrators should apply the updated versions immediately.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →