Record · corpus.blog/posts/01a08755-6ceb-722c-901b-fde0974f9c62

Newsletter #014: A Flood of Reports and a Fresh Coat of Paint 🎨🔐

blog.ulisesgascon.com · published 9 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.ulisesgascon.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 106
Words captured: 2,908

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/sponsors/UlisesGascon

github.com

Newsletter #013: Large Phishing Operations Against Maintainers 🎯 Read at the source ↗

blog.ulisesgascon.com

A New Look for Express Read at the source ↗

expressjs.com

A New Chapter for Express.js: Triumphs of 2024 and an ambitious 2025 Read at the source ↗

expressjs.com

https://nodeweekly.com/issues/625

nodeweekly.com

https://github.com/bjohansebas

github.com

https://github.com/g-francesca

github.com

https://www.linkedin.com/in/angeliningl/

linkedin.com

https://github.com/micheleriva

github.com

https://www.linkedin.com/in/davidespazianitesta/

linkedin.com

https://github.com/ShubhamOulkar

github.com

https://github.com/expressjs/express

github.com

Diving into the Node.js Website Redesign Read at the source ↗

nodejs.org

https://youtu.be/NHsIxEy0_Qw?si=ZrRBMF2amQkVdO--

youtu.be

Newsletter #010: Wrapping Up the Year with Talks, Security Work and Big Releases 🎁 Read at the source ↗

blog.ulisesgascon.com

https://x.com/NodeSource/status/2044782080077304310/photo/1

x.com

https://github.com/RafaelGSS

github.com

https://www.linkedin.com/posts/ulisesgascon_nodejs-collaboration-summit-26h1-nodejs-activity-7453083910936354816-EOmL

linkedin.com

https://youtu.be/bmDXBOfYFHQ

youtu.be

https://github.com/JakobJingleheimer

github.com

https://github.com/nodejs/node/pull/62829

github.com

https://youtu.be/Gl9c1VLGgpw

youtu.be

https://youtu.be/1xQQ0iWRaaY

youtu.be

https://github.com/santigimeno

github.com

https://youtu.be/DhmV4Fg_OSM

youtu.be

https://youtu.be/8qEoP4L_eNE

youtu.be

https://github.com/jasnell

github.com

https://youtu.be/ZHycC57Iv8o

youtu.be

https://youtu.be/nCae20J0g80

youtu.be

https://github.com/legendecas

github.com

https://github.com/Qard

github.com

https://youtu.be/EohTlIdqDYA

youtu.be

https://github.com/mcollina

github.com

https://youtu.be/Vr2nrYENzSg

youtu.be

https://youtu.be/OcysOfNeQaY

youtu.be

Trip report: Node.js collaboration summit (2026 London) Read at the source ↗

nodejs.org

https://blog.rafaelgss.dev/nodejs-collaborator-summit-26h1

blog.rafaelgss.dev

https://www.youtube.com/playlist?list=PLfMzBWSH11xZhA93H_9ulECtLVWtSm6zy

youtube.com

https://www.linkedin.com/posts/ulisesgascon_lodash-express-opensource-activity-7447602301365772288-CYFH

linkedin.com

https://github.com/lodash/lodash/pull/6203

github.com

https://github.com/UlisesGascon/ghsa-dashboard/releases/tag/v1.0.0

github.com

https://github.com/UlisesGascon/ghsa-dashboard

github.com

https://www.cve.org/CVERecord?id=CVE-2026-33806

cve.org

https://github.com/fastify/fastify/security/advisories/GHSA-247c-9743-5963

github.com

https://www.cve.org/CVERecord?id=CVE-2026-33807

cve.org

https://github.com/fastify/fastify-express/security/advisories/GHSA-hrwm-hgmj-7p9c

github.com

https://www.cve.org/CVERecord?id=CVE-2026-33808

cve.org

https://github.com/fastify/fastify-express/security/advisories/GHSA-6hw5-45gm-fj88

github.com

https://www.cve.org/CVERecord?id=CVE-2026-33805

cve.org

https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-gwhp-pf74-vj37

github.com

https://www.cve.org/CVERecord?id=CVE-2026-6270

cve.org

https://github.com/fastify/middie/security/advisories/GHSA-72c6-fx6q-fr5w

github.com

https://www.cve.org/CVERecord?id=CVE-2026-33804

cve.org

https://github.com/fastify/middie/security/advisories/GHSA-v9ww-2j6r-98q6

github.com

https://www.cve.org/CVERecord?id=CVE-2026-6410

cve.org

https://github.com/fastify/fastify-static/security/advisories/GHSA-pr96-94w5-mx2h

github.com

https://www.cve.org/CVERecord?id=CVE-2026-6414

cve.org

https://github.com/fastify/fastify-static/security/advisories/GHSA-x428-ghpx-8j92

github.com

https://www.cve.org/CVERecord?id=CVE-2026-7768

cve.org

https://github.com/fastify/fastify-accepts-serializer/security/advisories/GHSA-qxhc-wx3p-2wmg

github.com

https://www.cve.org/CVERecord?id=CVE-2026-6321

cve.org

https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6

github.com

https://www.cve.org/CVERecord?id=CVE-2026-6322

cve.org

https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc

github.com

https://www.cve.org/CVERecord?id=CVE-2026-6402

cve.org

https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-79cf-xcqc-c78w

github.com

https://www.cve.org/CVERecord?id=CVE-2026-8159

cve.org

https://github.com/pillarjs/multiparty/security/advisories/GHSA-65x3-rw7q-gx94

github.com

https://www.cve.org/CVERecord?id=CVE-2026-8161

cve.org

https://github.com/pillarjs/multiparty/security/advisories/GHSA-qxch-whhj-8956

github.com

https://www.cve.org/CVERecord?id=CVE-2026-8162

cve.org

https://github.com/pillarjs/multiparty/security/advisories/GHSA-xh3c-6gcq-g4rv

github.com

https://www.cve.org/CVERecord?id=CVE-2026-5078

cve.org

https://github.com/expressjs/morgan/security/advisories/GHSA-4vj7-5mj6-jm8m

github.com

https://labs.cloudsecurityalliance.org/wp-content/uploads/2026/05/mythosreadyv1.0.pdf

labs.cloudsecurityalliance.org

https://docs.npmjs.com/staged-publishing

docs.npmjs.com

https://cna.openjsf.org/feed.xml

cna.openjsf.org

May 2026 Security Releases Read at the source ↗

expressjs.com

https://maintainermonth.github.com/

maintainermonth.github.com

Maintainer Month 2026: Celebrating the People Who Keep Open Source Running Read at the source ↗

opensource.org

Open Source Organizations Weigh in on Age Attestation Read at the source ↗

opensource.org

https://nodesource.com/press/nodesource-launches-nsolid-ide-at-web-summit

nodesource.com

https://orbitant.com/en/ai-content-automation-for-publishing-posts/

orbitant.com

https://github.com/weorbitant/orbitant-os/pull/18

github.com

https://github.com/UlisesGascon/raspi-cluster

github.com

https://github.com/nodejs/build

github.com

https://github.com/pollyplummer

github.com

https://socket.dev/blog/dont-kill-the-goose-that-lays-the-golden-eggs

socket.dev

https://github.com/voxpelli

github.com

https://bsky.app/profile/voxpelli.com/post/3mkpxqfecoc2o

bsky.app

https://github.com/collective-funds/guidelines/blob/main/GUIDELINES.md

github.com

How Node.js and V8 keep each other working - workflows, challenges and tips Read at the source ↗

joyeecheung.github.io

Why “Trusted Publishing” Can’t Save Us from Social Engineering Read at the source ↗

adventures.nodeland.dev

https://sethmlarson.dev/library-version-specifiers-not-for-vulnerabilities

sethmlarson.dev

https://www.olafalders.com/2026/05/26/Enable-Private-Vulnerability-Reporting/

olafalders.com

Why developer machines are now the number one target for supply chain attacks Read at the source ↗

aikido.dev

https://www.stepsecurity.io/blog/shai-hulud-here-we-go-again-mass-npm-supply-chain-attack-hits-the-antv-ecosystem

stepsecurity.io

https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854

wiz.io

https://blog.calif.io/p/mad-bugs-even-cat-readmetxt-is-not

blog.calif.io

QUIC and HTTP/3 Come To Node.js (finally) Read at the source ↗

jasnell.me

https://timothygu.me/es-howto/

timothygu.me

https://nodesource.com/blog/javascript-temporal-history-nodejs-26

nodesource.com

https://mirandaheath.website/fosdem-and-more/

mirandaheath.website

On Google declaring war on the Web Read at the source ↗

tante.cc

https://hackaday.com/2026/05/09/running-your-own-3g-network

hackaday.com

https://www.zdnet.com/article/open-source-repositories-are-being-overwhelmed-but-there-is-an-answer/

zdnet.com