corpus.blog
41,554 blogs · 5,316,985 posts Claim your blog
Back to blog.ulisesgascon.com
Blog · corpus.blog/blogs/blog.ulisesgascon.com/posts

blog.ulisesgascon.com

blog.ulisesgascon.com

2026

The OpenJS Foundation CNA is taking a coordinated break: September 17 to October 6, 2026original ↗
11 Sept 2026
Express is joining the OpenJS CNA coordinated breakoriginal ↗
9 Sept 2026
Express: August 2026 Security Releasesoriginal ↗
31 Aug 2026
Newsletter #016: Café, CVEs and a Repository Under Attack ☕original ↗
3 Aug 2026
Express: July 2026 Security Releasesoriginal ↗
31 Jul 2026
Por qué rechazamos la mayoría de los reportes de vulnerabilidades en Lodashoriginal ↗
22 Jul 2026
Why Most Lodash Vulnerability Reports Get Rejectedoriginal ↗
22 Jul 2026
OpenJS Foundation Security Update: Q2 2026original ↗
8 Jul 2026
Newsletter #015: A Break from Survival Mode 🥹original ↗
1 Jul 2026
Blocking Install Scripts Is Not a Silver Bulletoriginal ↗
19 Jun 2026
Newsletter #014: A Flood of Reports and a Fresh Coat of Paint 🎨🔐original ↗
9 Jun 2026
Express: May 2026 Security Releasesoriginal ↗
31 May 2026
Newsletter #013: Large Phishing Operations Against Maintainers 🎯original ↗
7 Apr 2026
Express: March 2026 Security Releasesoriginal ↗
30 Mar 2026
Evolving the Node.js Release Scheduleoriginal ↗
10 Mar 2026
Newsletter #012: New Node.js Release Schedule, AI Stress-Testing Security & CVE Season 🔐original ↗
8 Mar 2026
Express: February 2026 Security Releasesoriginal ↗
27 Feb 2026
Newsletter #011: Secure Publishing, Lodash Overhaul & Express Releases 🛡️original ↗
5 Feb 2026
Secure npm package publishing in 2026: A Complete Guideoriginal ↗
3 Feb 2026
Seguridad npm 2026: publicación segura con granular tokens, worms y Trusted Publishingoriginal ↗
3 Feb 2026
What CVE-2025-13465 Teaches Us About Prototype Pollution in JavaScriptoriginal ↗
22 Jan 2026
Lecciones de CVE-2025-13465 sobre Prototype Pollution en JavaScriptoriginal ↗
22 Jan 2026
Lodash Rolls Out Major Security Overhaul | OpenJS Foundationoriginal ↗
21 Jan 2026

2025

Critical React Server Components Vulnerability: How We Responded at Orbitantoriginal ↗
4 Dec 2025
Vulnerabilidad crítica React Server Components: así reaccionamos en Orbitantoriginal ↗
4 Dec 2025
Newsletter #010: Wrapping Up the Year with Talks, Security Work and Big Releases 🎁original ↗
3 Dec 2025
El open source no falla por el códigooriginal ↗
24 Nov 2025
Open Source Doesn’t Fail Because of Code!original ↗
24 Nov 2025
Publishing More Securely on npm: Guidance from the OpenJS Security Collaboration Spaceoriginal ↗
14 Nov 2025
Strengthening Yeoman: Our 2025 Security Overhauloriginal ↗
6 Nov 2025
Newsletter #009: Open Source Treats — Lodash, Yeoman & Express 🎃original ↗
3 Nov 2025
El futuro de Lodashoriginal ↗
14 Oct 2025
The Future of Lodashoriginal ↗
14 Oct 2025
Newsletter #008: Security wins, npm attacks, and community momentum 🔒original ↗
23 Sept 2025
Express: July 2025 Security Releasesoriginal ↗
31 Jul 2025
Newsletter #007: Summer is a great time for making releases and working on security 🏖️original ↗
22 Jul 2025
Express: June 2025 Security Releasesoriginal ↗
18 Jul 2025
How Express.js Rebuilt Its Vulnerability Reporting Processoriginal ↗
5 Jun 2025
Newsletter #006: Maintainer Month Chronicles: Bugs, Builds & Board Games 🦄original ↗
23 May 2025
Express: May 2025 Security Releasesoriginal ↗
19 May 2025
Spring Cleaning in Express.js: Deprecations and the Path Aheadoriginal ↗
16 May 2025
VisionBoard v1.0.0 Milestone Progress – May 2025 Update 🚀original ↗
3 May 2025
Newsletter #005: Express 5.1, Node.js Releases & Kawaii Logos 💖🚀original ↗
25 Apr 2025
Node v22.15.0 (LTS)original ↗
23 Apr 2025
Node v20.19.1 (LTS)original ↗
22 Apr 2025
Newsletter #004: Open Source security moves & Stage time 🎙️original ↗
21 Mar 2025
How Yeoman is Enhancing Security Through Policy Updatesoriginal ↗
20 Mar 2025
Newsletter #003: Big News for Yeoman: Maintenance Reboot 🎩original ↗
31 Jan 2025
Newsletter #002: Reflecting on 2024 & Embracing 2025 with Express.js 🚀original ↗
17 Jan 2025
Yeoman’s Next Chapter Maintenance Rebootoriginal ↗
9 Jan 2025
A New Chapter for Express.js: Triumphs of 2024 and an ambitious 2025original ↗
9 Jan 2025
Newsletter #001: A Bright New Year: Introducing OpenPathfinderoriginal ↗
5 Jan 2025
Welcome to OpenPathfinder: Explore Our Mission and Toolsoriginal ↗
5 Jan 2025

2024

Express.js Security Audit: A Milestone Achievementoriginal ↗
22 Oct 2024
Decoding CVEs: A practical guide to assessing and mitigating security risksoriginal ↗
18 Oct 2024
Introducing Express v5: A New Era for the Node.js Frameworkoriginal ↗
15 Oct 2024
September 2024 - Express Security Releasesoriginal ↗
29 Sept 2024

2023

Using Feature Flags and Canary Releases with Electronoriginal ↗
27 Oct 2023
Node v20.7.0 (Current)original ↗
18 Sept 2023
Node v20.6.0 (Current)original ↗
4 Sept 2023
Node.js Binaries Integrity Checkeroriginal ↗
18 Aug 2023
How to do an Azure Blob media content optimization?original ↗
8 Aug 2023
Maintaining Balance for Open Source Maintainersoriginal ↗
8 Aug 2023
How to use Azure IOT Device Update with custom debian/ubuntu packages?original ↗
3 Aug 2023
How to package a .NET Core Service for Ubuntu?original ↗
1 Aug 2023
How to create a custom Debian package repository?original ↗
1 Aug 2023
How does the Official Node.js News Feeder work?original ↗
6 Jul 2023
Dockerize Javascript IOT Applicationsoriginal ↗
3 Jul 2023
How to Synchronize Markdown files with Confluence?original ↗
18 Jun 2023
Use Github Actions to monitor Jenkins agentsoriginal ↗
23 Mar 2023
Safely store secrets in Git using Blackboxoriginal ↗
6 Feb 2023
Ontology in the Digital Twins Definition Language universeoriginal ↗
6 Feb 2023
Unlock the Power of IoT with Azure Digital Twin Modelingoriginal ↗
6 Feb 2023
A Comprehensive Proof of Concept Walkthrough about Azure IOT Hub using Node.jsoriginal ↗
24 Jan 2023
You should use the OpenSSF Scorecardoriginal ↗
22 Jan 2023
How to use JSON Schemas and Semantic Versioning for everything?original ↗
19 Jan 2023

2022

How to visualize the Node.js Machines inventory in a Dashboard?original ↗
21 Nov 2022
Node.js Official Threat Modeloriginal ↗
21 Nov 2022
Official Node.js Security Best Practicesoriginal ↗
27 Oct 2022

2020

How to do load tests for an API using K6 and Grafana?original ↗
27 Jul 2020
Buffer Overflow Attackoriginal ↗
8 Apr 2020
Cross-Origin Resource Sharing (CORS)original ↗
8 Apr 2020
Content Security Policy (CSP)original ↗
8 Apr 2020
Cross Site Request Forgery (CSRF)original ↗
8 Apr 2020
DNS Prefetch Controloriginal ↗
8 Apr 2020
Don't Sniff Mimetypeoriginal ↗
8 Apr 2020
ETagoriginal ↗
8 Apr 2020
Expected Certificate Transparencyoriginal ↗
8 Apr 2020
Feature Policyoriginal ↗
8 Apr 2020
Frameguardoriginal ↗
8 Apr 2020
Hide Powered-Byoriginal ↗
8 Apr 2020
How to use Helmet in Express.jsoriginal ↗
8 Apr 2020
HTTP Parameter Pollution (HPP)original ↗
8 Apr 2020
Strict Transport Security (HSTS)original ↗
8 Apr 2020
Internet Explorer No Openoriginal ↗
8 Apr 2020
Lockfile Poisoned Attackoriginal ↗
8 Apr 2020
X-Permitted-Cross-Domain-Policiesoriginal ↗
8 Apr 2020
Prototype Pollutionoriginal ↗
8 Apr 2020
Referrer Policyoriginal ↗
8 Apr 2020
XML Bomb Attackoriginal ↗
8 Apr 2020
Next