Record · corpus.blog/posts/01a08755-6ceb-722c-901b-fde0998190ac

Newsletter #012: New Node.js Release Schedule, AI Stress-Testing Security & CVE Season 🔐

blog.ulisesgascon.com · published 8 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.ulisesgascon.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 80
Words captured: 1,704

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/sponsors/UlisesGascon

github.com

Newsletter #011: Secure Publishing, Lodash Overhaul & Express Releases 🛡️ Read at the source ↗

blog.ulisesgascon.com

https://github.com/nodejs/nodejs.org/pull/8631

github.com

https://www.youtube.com/watch?v=ulMhCu8Bz30

youtube.com

https://github.com/openjs-foundation/summit/issues/479

github.com

https://youtu.be/ppi87YjU9x0?si=NFF5WKIGDJE_U-_V&t=6524

youtu.be

https://nodeweekly.com/issues/614

nodeweekly.com

https://javascriptweekly.com/issues/775

javascriptweekly.com

https://github.com/nodejs/Release/issues/1113

github.com

https://openjsf.org/blog/ai-is-stress-testing-open-source

openjsf.org

New HackerOne Signal Requirement for Vulnerability Reports Read at the source ↗

nodejs.org

https://github.com/nodejs/TSC/issues/1826

github.com

curl security moves again Read at the source ↗

daniel.haxx.se

https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation

stepsecurity.io

https://gist.github.com/UlisesGascon/bc064336fecc194e2fa6f179b6a127df

gist.github.com

https://youtu.be/i64ZtXs27F4?si=fQwErJemwWrni6FA&t=2172

youtu.be

https://github.com/RafaelGSS

github.com

https://github.com/openjs-foundation/summit/issues/480

github.com

https://github.com/openjs-foundation/summit/issues/474

github.com

https://github.com/onebeyond/rascal/releases/tag/v21.0.0

github.com

https://github.com/onebeyond/rascal/releases/tag/v21.0.1

github.com

https://github.com/onebeyond/systemic/releases/tag/v5.0.0

github.com

https://github.com/expressjs/multer/releases/tag/v2.1.0

github.com

https://github.com/expressjs/multer/releases/tag/v2.1.1

github.com

https://www.cve.org/CVERecord?id=CVE-2026-2359

cve.org

https://github.com/expressjs/multer/security/advisories/GHSA-v52c-386h-88mc

github.com

https://www.cve.org/CVERecord?id=CVE-2026-3304

cve.org

https://github.com/expressjs/multer/security/advisories/GHSA-xf7r-hgr6-v32p

github.com

https://www.cve.org/CVERecord?id=CVE-2026-2880

cve.org

https://github.com/fastify/middie/security/advisories/GHSA-8p85-9qpw-fwgw

github.com

https://www.cve.org/CVERecord?id=CVE-2026-3520

cve.org

https://github.com/expressjs/multer/security/advisories/GHSA-5528-5vmv-3xc2

github.com

https://www.cve.org/CVERecord?id=CVE-2026-3419

cve.org

https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9

github.com

Express: February 2026 Security Releases Read at the source ↗

expressjs.com

https://2025.stateofjs.com/en-US/

2025.stateofjs.com

https://2025.stateofjs.com/en-US/libraries/back-end-frameworks/

2025.stateofjs.com

https://2025.stateofjs.com/en-US/other-tools/

2025.stateofjs.com

https://blog.codinghorror.com/the-magpie-developer/

blog.codinghorror.com

https://es-toolkit.dev/performance.html

es-toolkit.dev

https://github.com/UlisesGascon/lodash-benchmarks

github.com

https://nodesource.com

nodesource.com

https://openjsf.org/blog/nodejs-lts-upgrade-program

openjsf.org

https://nodesource.com/press/nodesource-joins-openjs-foundation-lts-upgrade-modernization-program

nodesource.com

https://github.com/nodejs/node/pull/57343

github.com

https://github.com/ovflowd

github.com

https://github.com/flakey5

github.com

https://github.com/AugustinMauroy

github.com

https://github.com/araujogui

github.com

https://github.com/avivkeller

github.com

http://beta.docs.nodejs.org

beta.docs.nodejs.org

Roadmap 2026 Read at the source ↗

webpack.js.org

Join the Python Security Response Team! Read at the source ↗

pyfound.blogspot.com

https://peps.python.org/pep-0811/

peps.python.org

https://alpha-omega.dev/

alpha-omega.dev

https://www.youtube.com/shorts/0VGUfoxF8aQ

youtube.com

https://openjsf.org/blog/openjs-security-annual-report-2025

openjsf.org

https://socket.dev/blog/inside-lodash-security-reset

socket.dev

https://socket.dev/blog/socket-joins-openjs-foundation

socket.dev

https://github.com/ctcpip

github.com

https://github.com/ctcpip/cve-kit

github.com

https://vulnogram.org/

vulnogram.org

https://github.com/mcollina

github.com

https://github.com/mcollina/skills

github.com

https://github.com/nucliweb

github.com

https://joanleon.dev/en/webperf-snippets-agent-skills/

joanleon.dev

https://www.fudco.com/chip/resume.html

fudco.com

https://habitatchronicles.com/2026/02/adventures-in-llm-land-with-thoughts-on-the-ai-revolution

habitatchronicles.com

https://www.theregister.com/Author/Steven-J-Vaughan-Nichols

theregister.com

https://www.theregister.com/2026/02/23/open_source_devs_column/

theregister.com

https://nodesource.com/blog/is-nodejs-single-threaded-or-not

nodesource.com

I Tested an AI Agent on My Live Systems. Here Is the Blast Radius Assessment Every Engineer Is Skipping. Read at the source ↗

heyvaldemar.com

https://www.youtube.com/watch?v=l5ggH-YhuAw

youtube.com

https://www.youtube.com/watch?v=aoag03mSuXQ

youtube.com

Linux CVE assignment process Read at the source ↗

kroah.com

https://www.youtube.com/watch?v=fUJM9tTvCG4

youtube.com

Sprites on the Web Read at the source ↗

joshwcomeau.com

BuildKit: Docker's Hidden Gem That Can Build Almost Anything Read at the source ↗

tuananh.net

https://nesbitt.io/2026/02/05/git-magic-files.html

nesbitt.io

https://www.youtube.com/watch?v=10d8HxS4y_g

youtube.com