nodejs
Safeguard articles tagged "nodejs" — guides, analysis, and best practices for software supply chain and application security.
112 articles
chokidar on npm: A Security Review of the File-Watching Library
chokidar is the file-watching library behind most of the Node.js tooling ecosystem, and version 4 cut its dependency count from 13 to 1. Here is what that means for your supply chain risk.
CVE-2022-24785: The Moment.js Path Traversal, Explained
A user-controlled locale string was all it took: how CVE-2022-24785 let attackers traverse paths through Moment.js locale loading on Node.js, and why the fix is a one-line upgrade.
Express and Node.js Security Hardening
Practical security hardening for Express.js applications covering middleware, input validation, and production deployment.
TypeScript Security Best Practices
How TypeScript's type system helps catch security bugs at compile time, and what it cannot protect you from.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.