NoFOMO
Search 中EN Sign in Sign up

Topic

Node.js, QUIC zero-days disclosed

A Node.js Brotli RCE and a QUIC zero-day threatening HTTP/3 servers were disclosed; now a 9.8-severity use-after-free flaw hit the kernel IPv4 TCP stack.

8 stories · Oct 22, 07:31 to Oct 29, 20:45

  1. Oct 22, 2026

    1. Node.js Brotli RCE Vulnerability

      Vercel reports a high-severity RCE flaw in Node's Brotli decoder affecting Node 22, 24, 26; WAF rules block exploits.

      Open Source Peaked at #2 @vercel_dev

    2. QUIC Library 0-Day Disclosed

      Researchers disclose a QUIC 0-day letting anyone remotely shut down servers, via QPACK amplification attacks on HTTP/3.

      Open Source Peaked at #3 @4A4133

  2. Oct 23, 2026

    1. eMudhra Misissued Certificates Face Browser Removal

      eMudhra failed to explain a mis-signed certificate within 24 hours and blamed customers, likely to be removed as a CA by Chrome and Mozilla.

      Open Source Peaked at #1 @GergelyOrosz

  3. Oct 25, 2026

    1. RTX 3090 Power Limit Unlocked

      Someone exploited a GPU firmware flaw to unlock RTX 3090 limits, boosting PyTorch from 75 to 135 TFLOPS at 360W.

      Open Source Peaked at #2 @lxfater

  4. Oct 26, 2026

    1. Researcher discloses 11 Tailscale flaws

      Researcher Erica Windisch skipped coordinated disclosure and published 11 unpatched Tailscale flaws, including SSH race-condition privilege escalation.

      Open Source Peaked at #1 @IntCyberDigest

    2. Self-Styled AI Whistleblower Warning

      A self-proclaimed AI researcher claims a major cyberattack on US power grids is being hidden, urging preparation.

      AI Peaked at #1 @TheCoinCollect8

  5. Oct 29, 2026

    1. Node.js 26 enters LTS

      Node.js 26.13.0 is now Long Term Support through April 2029, with a note on installing libatomic on Linux.

      Open Source Peaked at #1 @nodejs

    2. Critical kernel TCP vulnerability

      AJ Stuyvenberg warns of a 9.8 severity use-after-free flaw in the kernel's IPv4 TCP stack, urging immediate patching.

      Open Source Peaked at #1 @astuyve

Suggest a source

Is there a first-hand source we're missing, or a topic we should watch? Tell us. Once approved, everyone's board covers it.

@username or profile link