The Hacker News

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

The official n8n Docker image has lacked PDF bindings since 2.43.2—yet 1-page text PDFs were still readable (Measured Issue 41242 with 5 tags)

Issue 41242 was opened on the n8n GitHub, reporting that in the official Docker image 2.43.3, all nodes handling PDFs fail with 'DOMMatrix is not defined'. The reporter's environment uses an external ...

"Installation successful"—but it doesn't work: 10 places where things go wrong silently between "installing" and "running" a package

Both pip install and pnpm add finished with success on the last line. The names are in the lock file, too. Yet, when I run it ...
Cyber Security News

Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code

Mythos AI found a critical Rejetto HFS flaw enabling admin-session forgery and arbitrary code execution via predictable Math.random() keys.