HTTP2Shell CVE-2026-111497: Fix the Brotli RCE Now
CVE-2026-111497 (HTTP2Shell) is a CVSS 9.2 Brotli RCE actively exploited in Node.js, Python, Bun, and .NET. CISA deadline is Nov 10. Here is ...
Node.js 26 LTS: Temporal API On by Default — 5 Breaking Changes
Node.js 26 is Active LTS. The Temporal API is on by default, five APIs are ...
Cloudflare Acquires Deno: What Developers Must Do Now
Cloudflare acquired the Deno team on October 9, 2026. Deno Deploy shuts down in six ...
TanStack AI 1.0: 23 Providers, Agents, and What to Do Now
TanStack AI 1.0 ships with 76 stable packages, 23 provider adapters, and an experimental agent ...
NestJS 12 Is Out: ESM, Zod, and a Breaking Change
NestJS 12 ships ESM-first packages, native Zod validation via Standard Schema, and a lifecycle hook ...
Bun 1.4.4: Drop Prettier — bun fmt Is 286x Faster
Bun 1.4.4 ships a built-in formatter that handles 2,616 files in 60 milliseconds. Prettier takes 17 seconds on the same set. If you’re ...
Deuz SDK 2.4: TypeScript Agents That Survive Crashes
Deuz SDK 2.4 ships the two features production agents have been missing: memory that survives ...
Node2Shell: Node.js Brotli RCE — Patch Now
CVE-2026-111497 is a CVSS 9.2 out-of-bounds write in Node.js’s bundled Brotli decoder. A public PoC ...
TanStack AI 1.0: Stable APIs, 23 Providers, No Lock-In
TanStack AI 1.0 is out. Here’s what changed from 0.x, why threadId is now required ...
TypeScript 7.1 Beta: Content Mappers and What Breaks
TypeScript 7.1 beta is out. Learn about content mappers for Vue and Svelte, the new ...