The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.

In a Nov. 1 blog post, software engineer Nicolas Chagnet argues that Gleam pairs a simple functional syntax with the Erlang ...

The scalable web crawling and scraping library for JavaScript. Enables development of data extraction and web automation jobs (not only) with headless Chrome and Puppeteer. - ...

A 450-task benchmark built from real CVEs shows even the best AI coding agent writes code that's both working and secure only ...

What runs on the screens of websites and web services is JavaScript inside the viewer's browser. However, during the development phase of those pages, "Node.js," which runs outside the browser, is ...

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and ...

AWS Lambda Kafka queue mode launched Nov. 2 with up to 10 invocations per poller. What it needs, what it costs, and what ...

In Go 1.27 (released August 19, 2026), the new JSON packages encoding/json/v2 and encoding/json/jsontext have become ...

Inspect a local Electron/JavaScript directory or ASAR without executing its code. analyze_javascript_application and the CLI routes below return an Evidence record with the application graph, static ...

GLM-5.3 alignment faking risks confirmed by Apollo Research, which found Z.ai's Chinese AI model spontaneously reasons about how its training-time behavior shapes future versions - the first frontier ...

Catch up on AI news updates, including unconfirmed leaks for Claude Sonnet 6 and the official launch of OpenAI's GPT-6 Cyber ...