‼️ Does anyone here use n8n? 10/10 RCE - Named: Ni8mare
You visit bleeping computer once and... bang, another infrastructure RCE 10/10 – yeay!
https://www.bleepingcomputer.com/news/security/max-severity-ni8mare-flaw-lets-hackers-hijack-n8n-servers/
You visit bleeping computer once and... bang, another infrastructure RCE 10/10 – yeay!
https://www.bleepingcomputer.com/news/security/max-severity-ni8mare-flaw-lets-hackers-hijack-n8n-servers/
A maximum severity vulnerability dubbed "Ni8mare" allows remote, unauthenticated attackers to take control over locally deployed instances of the N8N workflow automation platform.
The security issue is identified as CVE-2026-21858 and has a 10 out of 10 severity score. According to researchers at data security company Cyera, there are more than 100,000 vulnerable n8n servers.
n8n is an open-source workflow automation tool that allows users to connect applications, APIs, and services into complex workflows via a visual editor. It is primarily used to automate tasks and supports integrations with AI and large language model (LLM) services.
🗿1
Hey Folks!!! PARA-PARA-PARADOX....
The story (👆🏻) of Tailwind and core-js will certainly resonate as a cautionary tale in the developer community for a long time. It is a true paradox of our time: we are building increasingly powerful tools, yet the way we keep them alive is more fragile than ever.
#tailwind #corejs #ai
The story (👆🏻) of Tailwind and core-js will certainly resonate as a cautionary tale in the developer community for a long time. It is a true paradox of our time: we are building increasingly powerful tools, yet the way we keep them alive is more fragile than ever.
#tailwind #corejs #ai
⚠️ SECURITY RELEASE: Node.js 24.13.0 (LTS) — 2026-01-13 🟢🔒
https://nodejs.org/en/blog/release/v24.13.0
Notable Changes
(CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) https://github.com/nodejs-private/node-private/pull/797
(CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) https://github.com/nodejs-private/node-private/pull/748
(CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) https://github.com/nodejs-private/node-private/pull/760
(CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) https://github.com/nodejs-private/node-private/pull/773
(CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) https://github.com/nodejs-private/node-private/pull/759
(CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) https://github.com/nodejs-private/node-private/pull/796
ALSO! You know what you can do tomorrow! 😉
https://nodejs.org/en/blog/release/v24.13.0
Notable Changes
(CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) https://github.com/nodejs-private/node-private/pull/797
(CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) https://github.com/nodejs-private/node-private/pull/748
(CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) https://github.com/nodejs-private/node-private/pull/760
(CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) https://github.com/nodejs-private/node-private/pull/773
(CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) https://github.com/nodejs-private/node-private/pull/759
(CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) https://github.com/nodejs-private/node-private/pull/796
ALSO! You know what you can do tomorrow! 😉
nodejs.org
Node.js — Node.js 24.13.0 (LTS)
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and noscripts.
⚠️ The Angular community is incredibly strong 🫶🏻, but let’s make it even more visible! 💪🏻
I’ve noticed that adding a simple 🅰️ before your noscript (e.g., 🅰️ Angular Developer) makes a huge difference.
Here is why it's a win-win:
🟢 For us: We can find 'our people' faster and build a more relevant network.
🟢 For the community: It creates a clear visual identity in the feed.
🟢 For recruiters: It makes your tech stack stand out instantly during a quick search.
How about we turn this into a community-wide trend? Let’s make the Angular 🅰️ a symbol of our expertise! 🚀
What do you 🫵🏻 think? If you’re in, add the 🅰️ to your profile and drop a "Done" or "🅰️" in the comments!
#Angular #WebDev #AngularCommunity #Networking #linkedin
I’ve noticed that adding a simple 🅰️ before your noscript (e.g., 🅰️ Angular Developer) makes a huge difference.
Here is why it's a win-win:
🟢 For us: We can find 'our people' faster and build a more relevant network.
🟢 For the community: It creates a clear visual identity in the feed.
🟢 For recruiters: It makes your tech stack stand out instantly during a quick search.
How about we turn this into a community-wide trend? Let’s make the Angular 🅰️ a symbol of our expertise! 🚀
What do you 🫵🏻 think? If you’re in, add the 🅰️ to your profile and drop a "Done" or "🅰️" in the comments!
#Angular #WebDev #AngularCommunity #Networking #linkedin
👍3
🅰️ Release v21.1.0
https://github.com/angular/angular/releases/tag/v21.1.0
Here are the highlights:
- New formField directive for Signal Form binding
- focusBoundControl() method allows you to focus a Signal Form.
- Multi-case @switch blocks are finally here. No more duplicating template blocks for similar states.
Also in this release:
- Custom image loader transformations for Cloudflare, Cloudinary, ImageKit, Imgix
- Router.isActive now returns a Signal
- Experimental route provider cleanup (finally!)
- Stability debugger for hydration issues
- Spread operators in templates
https://github.com/angular/angular/releases/tag/v21.1.0
Here are the highlights:
- New formField directive for Signal Form binding
- focusBoundControl() method allows you to focus a Signal Form.
- Multi-case @switch blocks are finally here. No more duplicating template blocks for similar states.
Also in this release:
- Custom image loader transformations for Cloudflare, Cloudinary, ImageKit, Imgix
- Router.isActive now returns a Signal
- Experimental route provider cleanup (finally!)
- Stability debugger for hydration issues
- Spread operators in templates
❤1👍1
Angular Munich
🅰️ Release v21.1.0 https://github.com/angular/angular/releases/tag/v21.1.0 Here are the highlights: - New formField directive for Signal Form binding - focusBoundControl() method allows you to focus a Signal Form. - Multi-case @switch blocks are finally…
Ninja-Squad
What's new in Angular 21.1?
Angular 21.1 is out!
👍1