corpus.blog
41554 blogs · [ { "id": "01a0957d-4207-73ff-bde6-d56ee4ff0773", "title": "The OpenJS Foundation CNA is taking a coordinated break: September 17 to October 6, 2026", "url": "https://openjsf.org/blog/the-openjs-foundation-cna-is-taking-a-coordinated-break", "published_at": "2026-09-11T00:00:00+00:00" }, { "id": "01a0957d-4207-73ff-bde6-d56ee590a6e3", "title": "Express is joining the OpenJS CNA coordinated break", "url": "https://expressjs.com/en/blog/2026-09-09-joining-the-openjs-cna-security-break/", "published_at": "2026-09-09T00:00:00+00:00" }, { "id": "01a0957d-4207-73ff-bde6-d56ee59bc58e", "title": "Express: August 2026 Security Releases", "url": "https://expressjs.com/en/blog/2026-08-31-security-releases/", "published_at": "2026-08-31T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde094dad86d", "title": "Newsletter #016: Café, CVEs and a Repository Under Attack ☕", "url": "https://blog.ulisesgascon.com/newsletter-issue-16", "published_at": "2026-08-03T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde095858388", "title": "Express: July 2026 Security Releases", "url": "https://expressjs.com/en/blog/2026-07-31-security-releases/", "published_at": "2026-07-31T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09597337a", "title": "Por qué rechazamos la mayoría de los reportes de vulnerabilidades en Lodash", "url": "https://blog.ulisesgascon.com/por-que-rechazamos-la-mayoria-de-reportes-de-vulnerabilidades-en-lodash", "published_at": "2026-07-22T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde095f6cb64", "title": "Why Most Lodash Vulnerability Reports Get Rejected", "url": "https://blog.ulisesgascon.com/why-most-lodash-vulnerability-reports-get-rejected", "published_at": "2026-07-22T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0961ea48b", "title": "OpenJS Foundation Security Update: Q2 2026", "url": "https://openjsf.org/blog/openjs-security-update-q2-2026", "published_at": "2026-07-08T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde096413029", "title": "Newsletter #015: A Break from Survival Mode 🥹", "url": "https://blog.ulisesgascon.com/newsletter-issue-15", "published_at": "2026-07-01T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09676c2c0", "title": "Blocking Install Scripts Is Not a Silver Bullet", "url": "https://nodesource.com/blog/npm-v12-install-scripts-not-a-silver-bullet", "published_at": "2026-06-19T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0974f9c62", "title": "Newsletter #014: A Flood of Reports and a Fresh Coat of Paint 🎨🔐", "url": "https://blog.ulisesgascon.com/newsletter-issue-14", "published_at": "2026-06-09T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0982f74d7", "title": "Express: May 2026 Security Releases", "url": "https://expressjs.com/en/blog/2026-05-31-security-releases/", "published_at": "2026-05-31T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde098925d1e", "title": "Newsletter #013: Large Phishing Operations Against Maintainers 🎯", "url": "https://blog.ulisesgascon.com/newsletter-issue-13", "published_at": "2026-04-07T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde098b7dc98", "title": "Express: March 2026 Security Releases", "url": "https://expressjs.com/2026/03/30/security-releases.html", "published_at": "2026-03-30T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde098f3fd9f", "title": "Evolving the Node.js Release Schedule", "url": "https://nodejs.org/en/blog/announcements/evolving-the-nodejs-release-schedule", "published_at": "2026-03-10T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0998190ac", "title": "Newsletter #012: New Node.js Release Schedule, AI Stress-Testing Security & CVE Season 🔐", "url": "https://blog.ulisesgascon.com/newsletter-issue-12", "published_at": "2026-03-08T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde099f9b365", "title": "Express: February 2026 Security Releases", "url": "https://expressjs.com/2026/02/27/security-releases.html", "published_at": "2026-02-27T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09ad9a3c2", "title": "Newsletter #011: Secure Publishing, Lodash Overhaul & Express Releases 🛡️", "url": "https://blog.ulisesgascon.com/newsletter-issue-11", "published_at": "2026-02-05T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09bc78025", "title": "Secure npm package publishing in 2026: A Complete Guide", "url": "https://orbitant.com/en/secure-npm-package-publishing-2026/", "published_at": "2026-02-03T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09bcc3a25", "title": "Seguridad npm 2026: publicación segura con granular tokens, worms y Trusted Publishing", "url": "https://orbitant.com/publicacion-segura-de-paquetes-npm-2026/", "published_at": "2026-02-03T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09cbb9798", "title": "What CVE-2025-13465 Teaches Us About Prototype Pollution in JavaScript", "url": "https://orbitant.com/en/prototype-pollution-javascript-cve-2025-13465/", "published_at": "2026-01-22T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09d6cc98f", "title": "Lecciones de CVE-2025-13465 sobre Prototype Pollution en JavaScript", "url": "https://orbitant.com/prototype-pollution-javascript-cve-2025-13465/", "published_at": "2026-01-22T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09dcf67a4", "title": "Lodash Rolls Out Major Security Overhaul | OpenJS Foundation", "url": "https://openjsf.org/blog/lodash-security-overhaul", "published_at": "2026-01-21T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09e2f3d87", "title": "Critical React Server Components Vulnerability: How We Responded at Orbitant", "url": "https://orbitant.com/en/critical-react-server-components-vulnerability/", "published_at": "2025-12-04T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09f27f859", "title": "Vulnerabilidad crítica React Server Components: así reaccionamos en Orbitant", "url": "https://orbitant.com/vulnerabilidad-critica-react-server-components/", "published_at": "2025-12-04T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09fddd8fe", "title": "Newsletter #010: Wrapping Up the Year with Talks, Security Work and Big Releases 🎁", "url": "https://blog.ulisesgascon.com/newsletter-issue-10", "published_at": "2025-12-03T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde09fee1c32", "title": "El open source no falla por el código", "url": "https://blog.ulisesgascon.com/el-open-source-no-falla-por-el-codigo", "published_at": "2025-11-24T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a0529374", "title": "Open Source Doesn’t Fail Because of Code!", "url": "https://blog.ulisesgascon.com/open-source-doesnt-fail-because-of-code", "published_at": "2025-11-24T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a0ff850f", "title": "Publishing More Securely on npm: Guidance from the OpenJS Security Collaboration Space", "url": "https://openjsf.org/blog/publishing-securely-on-npm", "published_at": "2025-11-14T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a15104bf", "title": "Strengthening Yeoman: Our 2025 Security Overhaul", "url": "https://yeoman.io/blog/security-overhaul-2025", "published_at": "2025-11-06T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a18c0161", "title": "Newsletter #009: Open Source Treats — Lodash, Yeoman & Express 🎃", "url": "https://blog.ulisesgascon.com/newsletter-issue-9", "published_at": "2025-11-03T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a1bfde45", "title": "El futuro de Lodash", "url": "https://blog.ulisesgascon.com/el-futuro-de-lodash", "published_at": "2025-10-14T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a1df0c5e", "title": "The Future of Lodash", "url": "https://blog.ulisesgascon.com/the-future-of-lodash", "published_at": "2025-10-14T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a28d82f6", "title": "Newsletter #008: Security wins, npm attacks, and community momentum 🔒", "url": "https://blog.ulisesgascon.com/newsletter-issue-8", "published_at": "2025-09-23T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a3678ea7", "title": "Express: July 2025 Security Releases", "url": "https://expressjs.com/2025/07/31/security-releases.html", "published_at": "2025-07-31T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a42a34a6", "title": "Newsletter #007: Summer is a great time for making releases and working on security 🏖️", "url": "https://blog.ulisesgascon.com/newsletter-issue-7", "published_at": "2025-07-22T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a46b8b71", "title": "Express: June 2025 Security Releases", "url": "https://expressjs.com/2025/07/18/security-releases.html", "published_at": "2025-07-18T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a557d04b", "title": "How Express.js Rebuilt Its Vulnerability Reporting Process", "url": "https://expressjs.com/2025/06/05/vulnerability-reporting-process-overhaul.html", "published_at": "2025-06-05T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a5d88a24", "title": "Newsletter #006: Maintainer Month Chronicles: Bugs, Builds & Board Games 🦄", "url": "https://blog.ulisesgascon.com/newsletter-issue-6", "published_at": "2025-05-23T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a6c9f292", "title": "Express: May 2025 Security Releases", "url": "https://expressjs.com/2025/05/19/security-releases.html", "published_at": "2025-05-19T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a6d7c591", "title": "Spring Cleaning in Express.js: Deprecations and the Path Ahead", "url": "https://expressjs.com/2025/05/16/express-cleanup-legacy-packages.html", "published_at": "2025-05-16T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a757311c", "title": "VisionBoard v1.0.0 Milestone Progress – May 2025 Update 🚀", "url": "https://openpathfinder.com/blog/visionboard-update-may-2025", "published_at": "2025-05-03T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a78119fd", "title": "Newsletter #005: Express 5.1, Node.js Releases & Kawaii Logos 💖🚀", "url": "https://blog.ulisesgascon.com/newsletter-issue-5", "published_at": "2025-04-25T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a839854f", "title": "Node v22.15.0 (LTS)", "url": "https://nodejs.org/en/blog/release/v22.15.0", "published_at": "2025-04-23T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a8e9eef0", "title": "Node v20.19.1 (LTS)", "url": "https://nodejs.org/en/blog/release/v20.19.1", "published_at": "2025-04-22T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0a9d371d2", "title": "Newsletter #004: Open Source security moves & Stage time 🎙️", "url": "https://blog.ulisesgascon.com/newsletter-issue-4", "published_at": "2025-03-21T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0aaa1106a", "title": "How Yeoman is Enhancing Security Through Policy Updates", "url": "https://yeoman.io/blog/security-policy-update", "published_at": "2025-03-20T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0ab33b4b2", "title": "Newsletter #003: Big News for Yeoman: Maintenance Reboot 🎩", "url": "https://blog.ulisesgascon.com/newsletter-issue-3", "published_at": "2025-01-31T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0abc06015", "title": "Newsletter #002: Reflecting on 2024 & Embracing 2025 with Express.js 🚀", "url": "https://blog.ulisesgascon.com/newsletter-issue-2", "published_at": "2025-01-17T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0ac97185d", "title": "Yeoman’s Next Chapter Maintenance Reboot", "url": "https://yeoman.io/blog/maintenance-reboot", "published_at": "2025-01-09T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0ad1e0610", "title": "A New Chapter for Express.js: Triumphs of 2024 and an ambitious 2025", "url": "https://expressjs.com/2025/01/09/rewind-2024-triumphs-and-2025-vision.html", "published_at": "2025-01-09T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0ad27d169", "title": "Newsletter #001: A Bright New Year: Introducing OpenPathfinder", "url": "https://blog.ulisesgascon.com/newsletter-issue-1", "published_at": "2025-01-05T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0adb05f14", "title": "Welcome to OpenPathfinder: Explore Our Mission and Tools", "url": "https://openpathfinder.com/blog/welcome/", "published_at": "2025-01-05T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0ae0e238c", "title": "Express.js Security Audit: A Milestone Achievement", "url": "https://expressjs.com/2024/10/22/security-audit-milestone-achievement.html", "published_at": "2024-10-22T00:00:00+00:00" }, { "id": "01a08755-6ceb-722c-901b-fde0ae5d442e", "title": "Decoding CVEs: A practical guide to assessing and mitigating security risks", "url": "https://snyk.io/articles/decoding-cves-practical-guide-assessing-mitigating-security-risks", "published_at": "2024-10-18T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d094ccb7e", "title": "Introducing Express v5: A New Era for the Node.js Framework", "url": "https://expressjs.com/2024/10/15/v5-release.html", "published_at": "2024-10-15T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0a325d31", "title": "September 2024 - Express Security Releases", "url": "https://expressjs.com/2024/09/29/security-releases.html", "published_at": "2024-09-29T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0a76e275", "title": "Using Feature Flags and Canary Releases with Electron", "url": "https://github.com/UlisesGascon/poc-feature-flags-canary-releases", "published_at": "2023-10-27T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0b395032", "title": "Node v20.7.0 (Current)", "url": "https://nodejs.org/en/blog/release/v20.7.0", "published_at": "2023-09-18T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0bb4baad", "title": "Node v20.6.0 (Current)", "url": "https://nodejs.org/en/blog/release/v20.6.0", "published_at": "2023-09-04T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0bdeffee", "title": "Node.js Binaries Integrity Checker", "url": "https://github.com/UlisesGascon/nodejs-distribution-system-monitoring", "published_at": "2023-08-18T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0c9d6a71", "title": "How to do an Azure Blob media content optimization?", "url": "https://github.com/UlisesGascon/poc-azure-blob-media-optimization", "published_at": "2023-08-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0c9ea9c9", "title": "Maintaining Balance for Open Source Maintainers", "url": "https://opensource.guide/maintaining-balance-for-open-source-maintainers/", "published_at": "2023-08-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0d9693a3", "title": "How to use Azure IOT Device Update with custom debian/ubuntu packages?", "url": "https://github.com/UlisesGascon/poc-azure-iot-du-custom-package", "published_at": "2023-08-03T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0e7ea132", "title": "How to package a .NET Core Service for Ubuntu?", "url": "https://github.com/UlisesGascon/poc-packaging-dot-net-core-service-for-ubuntu", "published_at": "2023-08-01T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0ec93262", "title": "How to create a custom Debian package repository?", "url": "https://github.com/UlisesGascon/poc-custom-package-debian-repository", "published_at": "2023-08-01T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d0fba9c61", "title": "How does the Official Node.js News Feeder work?", "url": "https://blog.ulisesgascon.com/nodejs-news-feeder", "published_at": "2023-07-06T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d10b6fd55", "title": "Dockerize Javascript IOT Applications", "url": "https://blog.ulisesgascon.com/dockerize-js-iot-applications", "published_at": "2023-07-03T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d111ab302", "title": "How to Synchronize Markdown files with Confluence?", "url": "https://github.com/UlisesGascon/poc-sync-markdown-with-confluence", "published_at": "2023-06-18T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d11707baa", "title": "Use Github Actions to monitor Jenkins agents", "url": "https://github.com/UlisesGascon/jenkins-status-alerts-and-reporting", "published_at": "2023-03-23T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d11c7b099", "title": "Safely store secrets in Git using Blackbox", "url": "https://blog.ulisesgascon.com/safely-store-secrets-in-git-using-blackbox", "published_at": "2023-02-06T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d121306ed", "title": "Ontology in the Digital Twins Definition Language universe", "url": "https://github.com/UlisesGascon/POC-azure-IOT-DTDL-ontology", "published_at": "2023-02-06T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d130d2d9a", "title": "Unlock the Power of IoT with Azure Digital Twin Modeling", "url": "https://github.com/UlisesGascon/POC-azure-iot-digital-twins-modeling", "published_at": "2023-02-06T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d133d91d3", "title": "A Comprehensive Proof of Concept Walkthrough about Azure IOT Hub using Node.js", "url": "https://github.com/UlisesGascon/POC-azure-iot-hub-device-communications", "published_at": "2023-01-24T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d134949e5", "title": "You should use the OpenSSF Scorecard", "url": "https://blog.ulisesgascon.com/openssf-scorecard-in-nodejs", "published_at": "2023-01-22T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d143b53be", "title": "How to use JSON Schemas and Semantic Versioning for everything?", "url": "https://github.com/UlisesGascon/POC-semver-and-json-schemas", "published_at": "2023-01-19T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d15172210", "title": "How to visualize the Node.js Machines inventory in a Dashboard?", "url": "https://github.com/UlisesGascon/poc-nodejs-machines-ping-dashboard", "published_at": "2022-11-21T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d15cb1e03", "title": "Node.js Official Threat Model", "url": "https://github.com/nodejs/node/blob/main/SECURITY.md", "published_at": "2022-11-21T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d15f23232", "title": "Official Node.js Security Best Practices", "url": "https://nodejs.org/en/docs/guides/security/", "published_at": "2022-10-27T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d16882a22", "title": "How to do load tests for an API using K6 and Grafana?", "url": "https://github.com/UlisesGascon/PoC-Load-test", "published_at": "2020-07-27T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d177743a0", "title": "Buffer Overflow Attack", "url": "https://blog.ulisesgascon.com/buffer-overflow", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d17f55be8", "title": "Cross-Origin Resource Sharing (CORS)", "url": "https://blog.ulisesgascon.com/cors-cross-origin-resource-sharing", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1891ec63", "title": "Content Security Policy (CSP)", "url": "https://blog.ulisesgascon.com/csp-content-security-policy", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d19713179", "title": "Cross Site Request Forgery (CSRF)", "url": "https://blog.ulisesgascon.com/csrf-cross-site-request-forgery", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d19ae0fa1", "title": "DNS Prefetch Control", "url": "https://blog.ulisesgascon.com/dns-prefetch-control", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1a487031", "title": "Don't Sniff Mimetype", "url": "https://blog.ulisesgascon.com/dont-sniff-mimetype", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1af24e77", "title": "ETag", "url": "https://blog.ulisesgascon.com/etag", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1b6ff66c", "title": "Expected Certificate Transparency", "url": "https://blog.ulisesgascon.com/expect-certificate-transparency", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1c3fd396", "title": "Feature Policy", "url": "https://blog.ulisesgascon.com/feature-policy", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1d03a504", "title": "Frameguard", "url": "https://blog.ulisesgascon.com/frameguard", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1d746eac", "title": "Hide Powered-By", "url": "https://blog.ulisesgascon.com/hide-powered-by", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1dab21e1", "title": "How to use Helmet in Express.js", "url": "https://blog.ulisesgascon.com/how-to-use-helmet-in-express", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1e85cffb", "title": "HTTP Parameter Pollution (HPP)", "url": "https://blog.ulisesgascon.com/hpp-http-parameter-pollution", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1f5725c0", "title": "Strict Transport Security (HSTS)", "url": "https://blog.ulisesgascon.com/hsts-strict-transport-security", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d1fb6f76c", "title": "Internet Explorer No Open", "url": "https://blog.ulisesgascon.com/internet-explorer-no-open", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d206cca8f", "title": "Lockfile Poisoned Attack", "url": "https://blog.ulisesgascon.com/lockfile-posioned", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d2101397c", "title": "X-Permitted-Cross-Domain-Policies", "url": "https://blog.ulisesgascon.com/permitted-cross-domain-policies", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d21657074", "title": "Prototype Pollution", "url": "https://blog.ulisesgascon.com/prototype-pollution", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d221224a8", "title": "Referrer Policy", "url": "https://blog.ulisesgascon.com/referrer-policy", "published_at": "2020-04-08T00:00:00+00:00" }, { "id": "01a08755-6cec-7047-89b4-0d3d221d93d6", "title": "XML Bomb Attack", "url": "https://blog.ulisesgascon.com/xml_bomb", "published_at": "2020-04-08T00:00:00+00:00" } ] posts Claim your blog
Back to blog.ulisesgascon.com
Blog · corpus.blog/blogs/blog.ulisesgascon.com/posts

blog.ulisesgascon.com

blog.ulisesgascon.com

2026

The OpenJS Foundation CNA is taking a coordinated break: September 17 to October 6, 2026original ↗
11 Sept 2026
Express is joining the OpenJS CNA coordinated breakoriginal ↗
9 Sept 2026
Express: August 2026 Security Releasesoriginal ↗
31 Aug 2026
Newsletter #016: Café, CVEs and a Repository Under Attack ☕original ↗
3 Aug 2026
Express: July 2026 Security Releasesoriginal ↗
31 Jul 2026
Por qué rechazamos la mayoría de los reportes de vulnerabilidades en Lodashoriginal ↗
22 Jul 2026
Why Most Lodash Vulnerability Reports Get Rejectedoriginal ↗
22 Jul 2026
OpenJS Foundation Security Update: Q2 2026original ↗
8 Jul 2026
Newsletter #015: A Break from Survival Mode 🥹original ↗
1 Jul 2026
Blocking Install Scripts Is Not a Silver Bulletoriginal ↗
19 Jun 2026
Newsletter #014: A Flood of Reports and a Fresh Coat of Paint 🎨🔐original ↗
9 Jun 2026
Express: May 2026 Security Releasesoriginal ↗
31 May 2026
Newsletter #013: Large Phishing Operations Against Maintainers 🎯original ↗
7 Apr 2026
Express: March 2026 Security Releasesoriginal ↗
30 Mar 2026
Evolving the Node.js Release Scheduleoriginal ↗
10 Mar 2026
Newsletter #012: New Node.js Release Schedule, AI Stress-Testing Security & CVE Season 🔐original ↗
8 Mar 2026
Express: February 2026 Security Releasesoriginal ↗
27 Feb 2026
Newsletter #011: Secure Publishing, Lodash Overhaul & Express Releases 🛡️original ↗
5 Feb 2026
Secure npm package publishing in 2026: A Complete Guideoriginal ↗
3 Feb 2026
Seguridad npm 2026: publicación segura con granular tokens, worms y Trusted Publishingoriginal ↗
3 Feb 2026
What CVE-2025-13465 Teaches Us About Prototype Pollution in JavaScriptoriginal ↗
22 Jan 2026
Lecciones de CVE-2025-13465 sobre Prototype Pollution en JavaScriptoriginal ↗
22 Jan 2026
Lodash Rolls Out Major Security Overhaul | OpenJS Foundationoriginal ↗
21 Jan 2026

2025

Critical React Server Components Vulnerability: How We Responded at Orbitantoriginal ↗
4 Dec 2025
Vulnerabilidad crítica React Server Components: así reaccionamos en Orbitantoriginal ↗
4 Dec 2025
Newsletter #010: Wrapping Up the Year with Talks, Security Work and Big Releases 🎁original ↗
3 Dec 2025
El open source no falla por el códigooriginal ↗
24 Nov 2025
Open Source Doesn’t Fail Because of Code!original ↗
24 Nov 2025
Publishing More Securely on npm: Guidance from the OpenJS Security Collaboration Spaceoriginal ↗
14 Nov 2025
Strengthening Yeoman: Our 2025 Security Overhauloriginal ↗
6 Nov 2025
Newsletter #009: Open Source Treats — Lodash, Yeoman & Express 🎃original ↗
3 Nov 2025
El futuro de Lodashoriginal ↗
14 Oct 2025
The Future of Lodashoriginal ↗
14 Oct 2025
Newsletter #008: Security wins, npm attacks, and community momentum 🔒original ↗
23 Sept 2025
Express: July 2025 Security Releasesoriginal ↗
31 Jul 2025
Newsletter #007: Summer is a great time for making releases and working on security 🏖️original ↗
22 Jul 2025
Express: June 2025 Security Releasesoriginal ↗
18 Jul 2025
How Express.js Rebuilt Its Vulnerability Reporting Processoriginal ↗
5 Jun 2025
Newsletter #006: Maintainer Month Chronicles: Bugs, Builds & Board Games 🦄original ↗
23 May 2025
Express: May 2025 Security Releasesoriginal ↗
19 May 2025
Spring Cleaning in Express.js: Deprecations and the Path Aheadoriginal ↗
16 May 2025
VisionBoard v1.0.0 Milestone Progress – May 2025 Update 🚀original ↗
3 May 2025
Newsletter #005: Express 5.1, Node.js Releases & Kawaii Logos 💖🚀original ↗
25 Apr 2025
Node v22.15.0 (LTS)original ↗
23 Apr 2025
Node v20.19.1 (LTS)original ↗
22 Apr 2025
Newsletter #004: Open Source security moves & Stage time 🎙️original ↗
21 Mar 2025
How Yeoman is Enhancing Security Through Policy Updatesoriginal ↗
20 Mar 2025
Newsletter #003: Big News for Yeoman: Maintenance Reboot 🎩original ↗
31 Jan 2025
Newsletter #002: Reflecting on 2024 & Embracing 2025 with Express.js 🚀original ↗
17 Jan 2025
Yeoman’s Next Chapter Maintenance Rebootoriginal ↗
9 Jan 2025
A New Chapter for Express.js: Triumphs of 2024 and an ambitious 2025original ↗
9 Jan 2025
Newsletter #001: A Bright New Year: Introducing OpenPathfinderoriginal ↗
5 Jan 2025
Welcome to OpenPathfinder: Explore Our Mission and Toolsoriginal ↗
5 Jan 2025

2024

Express.js Security Audit: A Milestone Achievementoriginal ↗
22 Oct 2024
Decoding CVEs: A practical guide to assessing and mitigating security risksoriginal ↗
18 Oct 2024
Introducing Express v5: A New Era for the Node.js Frameworkoriginal ↗
15 Oct 2024
September 2024 - Express Security Releasesoriginal ↗
29 Sept 2024

2023

Using Feature Flags and Canary Releases with Electronoriginal ↗
27 Oct 2023
Node v20.7.0 (Current)original ↗
18 Sept 2023
Node v20.6.0 (Current)original ↗
4 Sept 2023
Node.js Binaries Integrity Checkeroriginal ↗
18 Aug 2023
How to do an Azure Blob media content optimization?original ↗
8 Aug 2023
Maintaining Balance for Open Source Maintainersoriginal ↗
8 Aug 2023
How to use Azure IOT Device Update with custom debian/ubuntu packages?original ↗
3 Aug 2023
How to package a .NET Core Service for Ubuntu?original ↗
1 Aug 2023
How to create a custom Debian package repository?original ↗
1 Aug 2023
How does the Official Node.js News Feeder work?original ↗
6 Jul 2023
Dockerize Javascript IOT Applicationsoriginal ↗
3 Jul 2023
How to Synchronize Markdown files with Confluence?original ↗
18 Jun 2023
Use Github Actions to monitor Jenkins agentsoriginal ↗
23 Mar 2023
Safely store secrets in Git using Blackboxoriginal ↗
6 Feb 2023
Ontology in the Digital Twins Definition Language universeoriginal ↗
6 Feb 2023
Unlock the Power of IoT with Azure Digital Twin Modelingoriginal ↗
6 Feb 2023
A Comprehensive Proof of Concept Walkthrough about Azure IOT Hub using Node.jsoriginal ↗
24 Jan 2023
You should use the OpenSSF Scorecardoriginal ↗
22 Jan 2023
How to use JSON Schemas and Semantic Versioning for everything?original ↗
19 Jan 2023

2022

How to visualize the Node.js Machines inventory in a Dashboard?original ↗
21 Nov 2022
Node.js Official Threat Modeloriginal ↗
21 Nov 2022
Official Node.js Security Best Practicesoriginal ↗
27 Oct 2022

2020

How to do load tests for an API using K6 and Grafana?original ↗
27 Jul 2020
Buffer Overflow Attackoriginal ↗
8 Apr 2020
Cross-Origin Resource Sharing (CORS)original ↗
8 Apr 2020
Content Security Policy (CSP)original ↗
8 Apr 2020
Cross Site Request Forgery (CSRF)original ↗
8 Apr 2020
DNS Prefetch Controloriginal ↗
8 Apr 2020
Don't Sniff Mimetypeoriginal ↗
8 Apr 2020
ETagoriginal ↗
8 Apr 2020
Expected Certificate Transparencyoriginal ↗
8 Apr 2020
Feature Policyoriginal ↗
8 Apr 2020
Frameguardoriginal ↗
8 Apr 2020
Hide Powered-Byoriginal ↗
8 Apr 2020
How to use Helmet in Express.jsoriginal ↗
8 Apr 2020
HTTP Parameter Pollution (HPP)original ↗
8 Apr 2020
Strict Transport Security (HSTS)original ↗
8 Apr 2020
Internet Explorer No Openoriginal ↗
8 Apr 2020
Lockfile Poisoned Attackoriginal ↗
8 Apr 2020
X-Permitted-Cross-Domain-Policiesoriginal ↗
8 Apr 2020
Prototype Pollutionoriginal ↗
8 Apr 2020
Referrer Policyoriginal ↗
8 Apr 2020
XML Bomb Attackoriginal ↗
8 Apr 2020
Next