While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight updates to fix vulnerabilities that could crash millions more websites.

Next.js patches two critical RCE flaws involving typed arrays and SVG processing, plus a Server Actions DoS affecting App Router apps.

What runs on the screens of websites and web services is JavaScript inside the viewer's browser. However, during the development phase of those pages, "Node.js," which runs outside the browser, is ...