Record · corpus.blog/posts/01a08755-6ceb-722c-901b-fde09ad9a3c2

Newsletter #011: Secure Publishing, Lodash Overhaul & Express Releases 🛡️

blog.ulisesgascon.com · published 5 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.ulisesgascon.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 67
Words captured: 1,575

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/sponsors/UlisesGascon

github.com

Newsletter #010: Wrapping Up the Year with Talks, Security Work and Big Releases 🎁 Read at the source ↗

blog.ulisesgascon.com

https://www.youtube.com/watch?v=tBQwbqV-suQ

youtube.com

https://orbitant.com/en/

orbitant.com

Publishing More Securely on npm: Guidance from the OpenJS Security Collaboration Space Read at the source ↗

openjsf.org

https://slides.ulisesgascon.com/publishing-javascript-securely-in-2026/

slides.ulisesgascon.com

Lodash Rolls Out Major Security Overhaul | OpenJS Foundation Read at the source ↗

openjsf.org

The Future of Lodash Read at the source ↗

blog.ulisesgascon.com

El futuro de Lodash Read at the source ↗

blog.ulisesgascon.com

https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg

github.com

What CVE-2025-13465 Teaches Us About Prototype Pollution in JavaScript Read at the source ↗

orbitant.com

https://github.com/github/opensource.guide/pull/3465

github.com

https://opensource.guide/security-best-practices-for-your-project/

opensource.guide

https://github.com/expressjs/discussions/issues/380

github.com

https://github.com/expressjs/serve-index/releases/tag/v1.9.2

github.com

https://github.com/expressjs/session/releases/tag/v1.19.0

github.com

https://github.com/expressjs/cors/releases/tag/v2.8.6

github.com

https://github.com/expressjs/body-parser/releases/tag/v2.2.2

github.com

https://github.com/pillarjs/send/releases/tag/0.19.2

github.com

https://github.com/expressjs/serve-static/releases/tag/v2.2.1

github.com

https://github.com/expressjs/serve-static/releases/tag/v1.16.3

github.com

https://github.com/expressjs/errorhandler/releases/tag/1.5.2

github.com

https://github.com/onebeyond/license-checker/releases/tag/license-checker-v2.2.0

github.com

Critical React Server Components Vulnerability: How We Responded at Orbitant Read at the source ↗

orbitant.com

https://www.humblebundle.com/books/javascript-and-typescript-mastery-packt-books

humblebundle.com

https://www.amazon.com/dp/1803245174

amazon.com

https://safeinourworld.org/

safeinourworld.org

https://alpha-omega.dev/grants/grantrecipients/

alpha-omega.dev

https://openjsf.org/blog/openjs-security-annual-report-2025?

openjsf.org

https://www.youtube.com/shorts/i_JcfmXgQ4w

youtube.com

https://www.youtube.com/shorts/4h7P71n1sjw

youtube.com

https://socket.dev/blog/curl-shuts-down-bug-bounty-program-after-flood-of-ai-slop-reports

socket.dev

https://nodejs.org/es/blog/announcements/hackerone-signal-requirement

nodejs.org

https://github.com/webpack/security-wg/pull/17

github.com

https://github.com/webpack/security-wg/issues/27

github.com

Express.js Security Audit: A Milestone Achievement Read at the source ↗

expressjs.com

https://opencollective.com/lodash

opencollective.com

https://bsky.app/profile/robpalmer.bsky.social/post/3mcz334l4ck27

bsky.app

https://github.com/tc39/proposal-regexp-atomic-operators

github.com

https://github.com/tc39/proposal-regexp-buffer-boundaries

github.com

https://github.com/kevinccbsg

github.com

https://www.youtube.com/watch?v=qsHowBWgJn8

youtube.com

https://brikev.github.io/twd-shadcn/

brikev.github.io

https://orcwg.org/

orcwg.org

https://cra.orcwg.org/

cra.orcwg.org

https://github.com/JoshuaKGoldberg

github.com

https://www.flint.fyi/blog/introducing-flint

flint.fyi

https://www.joshuakgoldberg.com/blog/

joshuakgoldberg.com

https://github.com/mcollina

github.com

https://github.com/nodejs/node/pull/61478

github.com

https://nodesource.com/blog/nodejs-security-release-january-2026

nodesource.com

Improving Single Executable Application Building for Node.js Read at the source ↗

joyeecheung.github.io

https://charity.wtf/2025/06/19/in-praise-of-normal-engineers/

charity.wtf

Tracking kernel commits across branches Read at the source ↗

kroah.com

https://jesuspaz.com/articles/how-to-build-nodejs-from-source

jesuspaz.com

https://ethanarrowood.com/blog/building-custom-nodejs-streams-for-large-files/

ethanarrowood.com

https://www.stefanjudis.com/today-i-learned/deprecate-method-in-node-js/

stefanjudis.com

https://kashw1n.com/blog/nodejs-2025/

kashw1n.com

https://addyo.substack.com/p/21-lessons-from-14-years-at-google

addyo.substack.com

https://jslegenddev.substack.com/p/you-can-now-make-ps2-games-in-javascript

jslegenddev.substack.com

https://nesbitt.io/2025/12/15/how-i-assess-open-source-libraries.html

nesbitt.io

Web dependencies are broken. Can we fix them? Read at the source ↗

lea.verou.me

https://www.youtube.com/watch?v=HuPG-4ayXQM

youtube.com

Stop turning everything into arrays (and do less work instead) Read at the source ↗

allthingssmitty.com

https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild

wiz.io

require(esm) in Node.js: implementer's tales Read at the source ↗

joyeecheung.github.io

https://github.com/nucliweb

github.com