node:http

Dynamic languages vulnerable to module import exploits, authors find

This article explores a security vulnerability where malicious code can be injected into software by exploiting how dynamic languages resolve module imports. By placing a specially crafted file in a directory that is pa…