Record · corpus.blog/posts/01a08755-6ceb-722c-901b-fde094dad86d

Newsletter #016: Café, CVEs and a Repository Under Attack ☕

blog.ulisesgascon.com · published 3 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.ulisesgascon.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 84
Words captured: 1,730

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/sponsors/UlisesGascon

github.com

Newsletter #015: A Break from Survival Mode 🥹 Read at the source ↗

blog.ulisesgascon.com

https://github.com/teffcode

github.com

https://nodesource.com

nodesource.com

https://nodesource.com/blog/what-is-a-cve-nodejs-developers

nodesource.com

https://nodesource.com/blog/why-npm-install-can-execute-code-npm-v12

nodesource.com

Why Most Lodash Vulnerability Reports Get Rejected Read at the source ↗

blog.ulisesgascon.com

Newsletter #008: Security wins, npm attacks, and community momentum 🔒 Read at the source ↗

blog.ulisesgascon.com

https://github.com/BradGroux

github.com

https://digitalmeld.io/blog/the-incident-plan-has-to-exist-before-the-incident/

digitalmeld.io

https://gist.github.com/BradGroux/bd0f6b879fd76c774d9db22f8fd80335

gist.github.com

https://www.cve.org/CVERecord?id=CVE-2026-13697

cve.org

https://github.com/nodejs/undici/security/advisories/GHSA-4cwx-7wf7-3272

github.com

https://www.cve.org/CVERecord?id=CVE-2026-15157

cve.org

https://github.com/nodejs/undici/security/advisories/GHSA-m8rv-5g2x-5cg5

github.com

https://www.cve.org/CVERecord?id=CVE-2026-14643

cve.org

https://github.com/nodejs/undici/security/advisories/GHSA-jr45-8vmc-qm54

github.com

https://www.cve.org/CVERecord?id=CVE-2026-16728

cve.org

https://github.com/nodejs/undici/security/advisories/GHSA-8xcm-r25x-g524

github.com

https://www.cve.org/CVERecord?id=CVE-2026-16729

cve.org

https://github.com/nodejs/undici/security/advisories/GHSA-v3r7-h72x-cjcm

github.com

https://www.cve.org/CVERecord?id=CVE-2026-18446

cve.org

https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7

github.com

https://www.cve.org/CVERecord?id=CVE-2026-16221

cve.org

https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx

github.com

https://www.cve.org/CVERecord?id=CVE-2026-16117

cve.org

https://github.com/fastify/fastify-http-proxy/security/advisories/GHSA-mx7v-qhg9-2mvv

github.com

https://www.cve.org/CVERecord?id=CVE-2026-15631

cve.org

https://github.com/fastify/fastify-http-proxy/security/advisories/GHSA-7hrw-592w-9wh2

github.com

https://www.cve.org/CVERecord?id=CVE-2026-16158

cve.org

https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-v574-6498-x57v

github.com

https://www.cve.org/CVERecord?id=CVE-2026-15144

cve.org

https://github.com/fastify/fastify-rate-limit/security/advisories/GHSA-grpc-p53c-r64v

github.com

https://www.cve.org/CVERecord?id=CVE-2026-15074

cve.org

https://github.com/fastify/fastify-static/security/advisories/GHSA-83w8-p2f5-377r

github.com

https://www.cve.org/CVERecord?id=CVE-2026-7120

cve.org

https://github.com/fastify/fastify-static/security/advisories/GHSA-8pvw-jcv7-9cmj

github.com

https://www.cve.org/CVERecord?id=CVE-2026-18174

cve.org

https://github.com/fastify/forwarded/security/advisories/GHSA-2849-m2w7-xm8f

github.com

https://www.cve.org/CVERecord?id=CVE-2026-12590

cve.org

https://github.com/expressjs/body-parser/releases/tag/1.20.6

github.com

https://github.com/Phillip9587

github.com

https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6

github.com

July 2026 Security Releases Read at the source ↗

expressjs.com

OpenJS Foundation Security Update: Q2 2026 Read at the source ↗

openjsf.org

https://github.com/openjs-foundation/security-wg/issues/337

github.com

https://www.youtube.com/watch?v=p1wRl2RR_QU

youtube.com

https://github.com/nodejs/node-core-utils

github.com

https://github.com/RafaelGSS

github.com

https://github.com/pollyplummer

github.com

https://socket.dev/blog/nodejs-considers-public-workflow-for-security-reports

socket.dev

https://github.com/andrew

github.com

Scrutineer: Scanning Open Source Without Flooding Maintainers Read at the source ↗

alpha-omega.dev

https://bsky.app/profile/webpack.js.org

bsky.app

https://github.com/bjohansebas

github.com

https://github.com/stream-utils/raw-body/releases/tag/v4.0.0

github.com

https://github.com/nodejs/web-team

github.com

Check out the New Node.js API Documentation Preview Read at the source ↗

nodejs.org

https://github.com/araujogui

github.com

https://beta.docs.nodejs.org/

beta.docs.nodejs.org

https://github.com/nodejs/doc-kit/issues

github.com

https://github.com/GroophyLifefor

github.com

https://muratkirazkaya.com/blogs/is-express-really-slow

muratkirazkaya.com

https://github.com/mcollina

github.com

No, We Can't Harden Node.js Against Prototype Pollution Read at the source ↗

adventures.nodeland.dev

https://github.com/discombobulateme

github.com

https://www.linkedin.com/pulse/empires-pirates-small-files-undo-power-paloma-oliveira-lqy8e/

linkedin.com

https://github.com/Cyber-JiuJiteria

github.com

Join the Fight: Building a Team of Open Source Security Engineers in Residence Read at the source ↗

alpha-omega.dev

https://github.com/mochajs/mocha

github.com

https://mochajs.org/blog/2026-community-sponsorships/

mochajs.org

Open Source Security: A Strategy, Not a Cost Read at the source ↗

alpha-omega.dev

https://security.metacpan.org/2026/07/15/april-task-force-announcement.html

security.metacpan.org

Signing git commits with GPG Read at the source ↗

backend.cafe

How to build a circular LCD clock Read at the source ↗

blinry.org

https://www.vlt.io/blog/npm-12-breaking-changes

vlt.io

In defense of polyfills Read at the source ↗

lea.verou.me

AsyncAPI npm packages backdoored via GitHub Actions Read at the source ↗

aikido.dev

How AI Is Changing Open Source Read at the source ↗

enblog.eischmann.cz

Symlinks Are Still Scary (And Yes, You Can Commit Them to Git) Read at the source ↗

snyk.io

Security: line goes up Read at the source ↗

hugovk.dev

https://hackernoon.com/your-javascript-console-is-not-showing-the-whole-truth

hackernoon.com

https://github.com/pixel-point/aval

github.com

Open Source Must Be Fun (Or It Will Die) Read at the source ↗

mikemcquaid.com