446
PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites (cybernews.com)
submitted 6 days ago by to c/technology@lemmy.world
92 comments fedilink hide all child comments
 

Node.js has just released fixes for 10 security vulnerabilities that could put node-powered applications at risk and is urging everyone to update their systems.

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 6 days ago (5 children)

Imagine working in IT security. How bad a time are you having right now? Are we expecting things to become better or worse the next few months?

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 5 points 6 days ago

    I am… well sorta. My team has to deal with the cleanup and repercussions at least. Let’s just say this week was not fun. At all.

    In addition to the eMudhra certs and the php issue, there were also issues with python, Oracle, Java, and node.js. The certs and php were definitely the highest profile. They shut down incoming traffic to university web servers for the php one. The certs would have been more of a problem if we had extremely short expiration times

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 5 days ago

    Am in IT. These last few days were pretty annoying. 3 mandatory meetings a day. Scrambling to find the right person for our 3rd party stacks.

    The fix was pretty easy once we had it. Just annoyed that this is going to only get worse.

  • permalink
  • fedilink
  • source
  • parent