Node.js has just released fixes for 10 security vulnerabilities that could put node-powered applications at risk and is urging everyone to update their systems.

you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 6 days ago (4 children)

rihht? opencloud posted a really tacky "nextcloud is dealing with this. checkout open cloud. written in go."

dude... do we need to drop a link to the golang cves? they had a critical bug this year.

ruby? critical regex rce this week.

nodejs? same.

php made the news because of the embargo break making it go viral and everyone loving to hate on php. But people in glass houses should be careful throwing stones.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 6 days ago (3 children)

    How's Rust holding these days I wonder? Always wished I had learned it when it first came out ha.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 5 days ago*

    Rust itself doesnt get mant CVEs and its been quiet so thats nice.

    its worth noting its a bit different than languages I listed and lower-level. Those languages are also runtimes that provide a large set of features that run with your code.

    That means while you could write websites in Rust, reall it is what you might consider writing PHP in if you started in 2026 not an alternative. Its more closely like MUSL(did get a recent big security release 🙄) or glibc.

  • source
  • parent