node-security
Safeguard articles tagged "node-security" — guides, analysis, and best practices for software supply chain and application security.
7 articles
bcrypt on npm: A Security Review and Safe Usage Guide
The bcrypt npm package is a solid password-hashing choice, but its 72-byte input limit and native build story create footguns worth understanding before you ship.
Formidable npm: Security Review and Safe Usage of the File-Upload Parser
A security review of the formidable npm package: the file-upload risks, the CVEs assigned against it, and how to configure it so uploads stay safe.
JavaScript Vulnerability Scanner: How It Works and What to Use
A JavaScript vulnerability scanner finds risky dependencies and insecure code across your Node and browser projects. Here is how the different types work.
CVE-2021-3918: Prototype Pollution in json-schema Explained
CVE-2021-3918 is a prototype pollution vulnerability in the json-schema npm package that can let crafted input tamper with JavaScript object prototypes. Here is who is affected and how to fix it.
Docker Hub Node Images: Choosing and Securing the Right Node Tag
The official Node image on Docker Hub ships in half a dozen flavors, and the tag you pick changes your attack surface far more than most teams realize.
The cors npm Package: A Security Review and Safe Usage Guide
The cors npm package is the standard CORS middleware for Express, and most of its danger comes from misconfiguration, not the library itself. Here is how to set it correctly.
Worker Threads in Node.js: How They Work and How to Use Them Safely
A worker thread in Node.js runs JavaScript in parallel on a separate thread, letting you offload CPU-heavy work without blocking the event loop. Here is how they work and the security pitfalls to avoid.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.