Vulnerabilities
Prototype pollution in toml-node exposes Node.js apps to data corruption
A high-severity flaw in the toml-node library allows attackers to inject properties into Object.prototype before version 5.0.1 is deployed.
Node.js
Everything AppSec Scoop has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Stills Media Processor Patch Urgent for Versions Before 25.24.2
Critical OS command injection flaw in Stills allows command execution via crafted file paths until version 25.24.2.