Tagged: security
Error: Access to this API has been restricted (EPERM) when running Node with --permission
You started Node with the security permission model (`--permission`) but didn't grant access to the specific resource your code touches. Filesystem paths, child processes, and worker threads each need explicit flags like `--allow-fs-read`, `--allow-fs-write`, or `--allow-child-process`.
DeprecationWarning: Buffer() is deprecated due to security and usability issues
The legacy `new Buffer(...)` constructor is deprecated because it could accidentally expose uninitialized memory. Replace it with `Buffer.from(...)`, `Buffer.alloc(...)`, or `Buffer.allocUnsafe(...)` depending on whether you're wrapping existing data or allocating new memory.
Security advisory: React Server Components RCE (CVE-2025-55182) — am I affected?
CVE-2025-55182 is a critical remote-code-execution vulnerability affecting the react-server-dom-* packages in React 19.0.0 through 19.2.2, exploitable in apps that use React Server Components (default create-next-app setups included). Pure client-side React apps that don't use RSC aren't affected by this specific CVE. Update to the patched releases (19.0.4, 19.1.5, or 19.2.4 and later) immediately if you use RSC.