LATEST FEEDS

RECENT ARTICLES

More Programming Articles
01

Node.js CVE-2026-111497: where untrusted Brotli reaches your app

The October 21, 2026 Node.js security releases fix CVE-2026-111497, an out-of-bounds write in the bundled Brotli decoder that the project says can lead to remote code execution. The fixed versions are 22.23.4, 24.22.1 and 26.12.1. Upgrading is the fix, and there's nothing to deba…

02

How to Save a Webpage as PDF in Chrome (2 Ways)

Chrome can already save any webpage as a PDF, no extension needed. Press Ctrl+P (⌘+P on a Mac), set Destination to Save as PDF, and click Save. For a short, simple page, that's honestly all you need.It gets harder when the page is long, loads its images as you scroll, or lo…

03

Next.js security update October 2026: what 16.4.1 and 15.5.28 fix

The October 14, 2026 Next.js security update fixes two critical remote code execution bugs and one high-severity denial of service, and the fixed releases are 16.4.1 and 15.5.28. Upgrading next is the main fix, but it isn't the whole check. One of the RCEs lives in sharp, which y…

05

PHP2Shell: how to confirm your PHP server is actually patched

PHP2Shell, the pair of critical PHP bugs fixed on October 21, 2026, is the kind of vulnerability where php -v can mislead you in both directions. A fully patched Ubuntu 24.04 box still says 8.3.6. An updated host can keep serving requests from old workers. And the CLI you ran the…

06

How Go Context Cancellation Actually Propagates, and Where It Stops

Cancelling a Go context doesn't stop anything. It closes a channel and records an error, and that's all. Every goroutine below that point has to notice on its own, at the exact place where it might block. Most context bugs come from code that assumes cancellation is enforced rath…

Explore