Node 24 now includes Undici 7.0.0. For those not in the know, Undici is Node’s modern HTTP client. This upgrade means better support for the latest HTTP standards and a generally smoother ride if ...

According to the cyber agency, these vulnerabilities exist in Node.js due to an inadequate permission model that fails to restrict file stats "through the fs.lstat API, embedding of non-network ...