Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data

The Hacker News - Nov 12, 2026

A flaw fixed in Node.js this week lets unauthenticated clients crash servers that use the runtime's built-in HTTP/2 support on the 24.x and 26.x release lines. A second HTTP/2 flaw can cause a server to send a client pieces of its memory, including responses intended for other connections. Fixed versions were released for all three supported lines: 22.23.5, 24.22.3, and 26.13.1. The crash

Read full article

MORE NEWS

Apple may make future iPhones shorter and more compact with new 18:9 display design

Nov 12, 2026

Apple may make future iPhones shorter and more compact with new 18:9 display design

Apple is reportedly considering shorter iPhones with an 18:9 display ratio instead of the current 19.5:9 design to improve one-handed usability. The redesign could also bring a smaller Dynamic Island or an under-display camera.

Nexperia’s China unit claims supply chain ‘localisation’ as rift with Dutch parent deepens

Nov 12, 2026

Nexperia’s China unit claims supply chain ‘localisation’ as rift with Dutch parent deepens

Nexperia’s Chinese unit says its domestic 12-inch wafer platform now covers all of its product categories, marking a key milestone in building an independent supply chain more than a year after its Dutch parent halted direct shipments of European wafers. Speaking at the 23rd China International Semiconductor Expo in Beijing on Thursday, Nexperia China CEO John Chang said the local division had partnered with domestic foundries while relying on its own facilities and local contractors to handle...

Turkey & AIIB strike $1.6 billion deal for climate policy after COP31

Nov 12, 2026

Turkey & AIIB strike $1.6 billion deal for climate policy after COP31

Turkey & AIIB strike $1.6 billion deal for climate policy after COP31The Asian Infrastructure Investment Bank just finalized a groundbreaking deal with the host of the 2026 COP31, Turkey and its all going towards climate policy. According to a report that tracks financial need, there needs to be...

Campaigners want more land protected from housing

Nov 12, 2026

Campaigners want more land protected from housing

After parkland was safeguarded from development, residents want the council to change a housing plan.

Art trail celebrates arrival of black bears at zoo

Nov 12, 2026

Art trail celebrates arrival of black bears at zoo

Jersey Zoo says the art trail will celebrate the world's "largest inhabitants to its smallest.

Nurdle impact to be researched for a year

Nov 12, 2026

Nurdle impact to be researched for a year

Research will be carried out on sea-birds and marine life following a microplastic spillage in July.

'Summer was a wake-up call, winter could be dire' warning over food supplies

Nov 12, 2026

'Summer was a wake-up call, winter could be dire' warning over food supplies

Wales needs to grow more fruit and veg or it will be at the mercy of wars and climate change, one expert says.

Public funds ploughing cash into AI will own megatrends shaping economy

Nov 12, 2026

Public funds ploughing cash into AI will own megatrends shaping economy

GLOBAL-SWF/AI:Public funds ploughing cash into AI will 'own' megatrends shaping economy

Nvidia’s Board Is Weighing Jensen Huang’s Future

Nov 12, 2026

Nvidia’s Board Is Weighing Jensen Huang’s Future

Mr. Huang has been under scrutiny for an affair with a woman said to be a Chinese spy, as well as for a relationship with an executive at his A.I. chip company.

AI investment faces reality check as returns remain unproven, next 18 months critical: Goldman Sachs

Nov 12, 2026

AI investment faces reality check as returns remain unproven, next 18 months critical: Goldman Sachs

The massive investment in artificial intelligence infrastructure is facing a reality check as concerns grow over whether technology companies will be able to generate sufficient returns from their spending, with the next 18 months emerging as a crucial period for the sector.

Chinese AI firms rush to secure Nvidia chip capacity as spy scandal stirs fear of US curbs

Nov 12, 2026

Chinese AI firms rush to secure Nvidia chip capacity as spy scandal stirs fear of US curbs

NVIDIA-PROBE/CHINA-CHIPS (EXCLUSIVE):EXCLUSIVE-Chinese AI firms rush to secure Nvidia chip capacity as spy scandal stirs fear of US curbs

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

Nov 12, 2026

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux. An attacker who can reach the

RECOMMENDED

Science Thread

Science Thread delivers quality and fascinating science and technology content that matters on a daily basis and makes it go viral.

ABOUT US
Sign Up

Copyright © 2015 - 2026 Science Thread. All Rights Reserved.