Newsletter #016: Café, CVEs and a Repository Under Attack ☕

We launched Café con CVEs, a show about Node.js security in Spanish, and I lived through every maintainer's nightmare at the first Repository Under Attack red team workshop. Plus why we reject around 95% of Lodash vulnerability reports, 15 CVEs patched across undici, fast-uri, the Fastify plugins, and body-parser, and plenty of awesome people doing awesome things.