About this seriesI come from a background as a Web Director and am currently managing a front-end team. I work alongside engineers, but I am still in the process of learning how to write code myself.
The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.
Interchangeable encrypted reasoning blocks let attackers decode hidden chain-of-thought and leak PII and credentials from major LLM APIs.