
HTTP2Shell (CVE-2026-111497): pip-audit Missed Brotli. How to Check Your Stack
Also called Node2Shell: a 9.2 Brotli decoder bug in requests, httpx, Node, Bun and Envoy. Copy-paste checks, fixed versions and a workaround.

Also called Node2Shell: a 9.2 Brotli decoder bug in requests, httpx, Node, Bun and Envoy. Copy-paste checks, fixed versions and a workaround.

Deno Deploy shuts down in six months and the announcement never mentions Deno KV. What's confirmed, what isn't, and the grep to run this week.

A practical guide to diagnosing and fixing memory leaks in Node.js production services using heap snapshots, with concrete code examples.

Bare fetch() has no timeout, so a stalled upstream can hang your app forever. Here's how to fix it with AbortSignal.timeout and sensible retries.

Migrating to an alternative JavaScript runtime and most of your code works? Here's how to debug the small percentage of Node APIs that don't.

Debug and fix Node.js memory leaks with heap snapshots, bounded caches, and proper listener cleanup — inspired by Voyager 1's 69 KB constraint.