126
 
 

Very happy that with the new --experimental-default-type module in Node.js v21 I can write my little helper commands, that I run directly in the terminal using --eval/-e, in ESM syntax now. E.g. to generate a hex JWT secret:

node --experimental-default-type module -e "import crypto from 'node:crypto'; console.log(crypto.randomBytes(32).toString('hex'));"

Find out more...

127
 
 

Key bit:

POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807) - Low

Node.js is affected by this vulnerability. The CVE-2023-4807 affects Windows users, and the vulnerability is rated as LOW by the OpenSSL Security Team.

Saved you a click: NIST National Vulnerability Database: CVE-2023-4807

128
submitted 2 years ago by [M] to c/nodejs@programming.dev
129
Node v21.0.0 (nodejs.org)
submitted 2 years ago* by [M] to c/nodejs@programming.dev
130
131
132