--- title: Node.js Vulnerability Cheatsheet | daily.dev description: Cross-site scripting (XSS) attacks in the browser can lead to remote code execution (RCE) attacks. Injection happens when an application cannot properly... canonical: https://daily.dev/posts/node-js-vulnerability-cheatsheet-xv0xg6ojp twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Node.js Vulnerability Cheatsheet | daily.dev og:description: Cross-site scripting (XSS) attacks in the browser can lead to remote code execution (RCE) attacks. Injection happens when an application cannot properly... og:url: https://daily.dev/posts/node-js-vulnerability-cheatsheet-xv0xg6ojp og:image: https://api.daily.dev/og/posts/XV0xg6oJP.png og:image:alt: Node.js Vulnerability Cheatsheet og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Node.js Vulnerability Cheatsheet **[Medium](https://daily.dev/sources/medium_js)** · 13 min read · 64 upvotes · 3 comments ## Summary Cross-site scripting (XSS) attacks in the browser can lead to remote code execution (RCE) attacks. Injection happens when an application cannot properly distinguish between untrusted user data and code. Security misconfigurations can compromise the security of Node applications. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@anam0927** · 0 upvotes > This is an awesome resource!!! Great job! **@crismarket75** · 0 upvotes > Great post ! --- Tags: [#cyber](https://daily.dev/tags/cyber), [#general-programming](https://daily.dev/tags/general-programming), [#nodejs](https://daily.dev/tags/nodejs) [View this post on daily.dev](https://daily.dev/posts/node-js-vulnerability-cheatsheet-xv0xg6ojp) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Node.js Vulnerability Cheatsheet","url":"https://daily.dev/posts/node-js-vulnerability-cheatsheet-xv0xg6ojp","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/node-js-vulnerability-cheatsheet-xv0xg6ojp"},"datePublished":"2022-02-18T17:23:22.670Z","dateModified":"2026-03-15T02:39:09.868Z","description":"Cross-site scripting (XSS) attacks in the browser can lead to remote code execution (RCE) attacks. Injection happens when an application cannot properly...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ef61d4b134619c666bc8766d952bb523","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ef61d4b134619c666bc8766d952bb523","isAccessibleForFree":true,"articleSection":"Medium","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Medium","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/medium","url":"https://daily.dev/sources/medium_js"},"commentCount":3,"discussionUrl":"https://daily.dev/posts/node-js-vulnerability-cheatsheet-xv0xg6ojp","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":64},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":3}],"keywords":"cyber,general-programming,nodejs","timeRequired":"PT13M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Medium","item":"https://daily.dev/sources/medium_js"},{"@type":"ListItem","position":3,"name":"Node.js Vulnerability Cheatsheet"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/node-js-vulnerability-cheatsheet-xv0xg6ojp","comment":[{"@type":"Comment","text":"This is an awesome resource!!! Great job!","datePublished":"2022-02-19T07:27:36.080Z","url":"https://daily.dev/posts/XV0xg6oJP#c-xkPUmSPbU","author":{"@type":"Person","name":"Anaam Khuram","url":"https://daily.dev/anam0927","image":"https://media.daily.dev/image/upload/s--dK5gm_dG--/f_auto,q_auto/v1697878703/avatars/avatar_AUkvrGoJ7QVRfW2IYmiNh"}},{"@type":"Comment","text":"Great post !","datePublished":"2022-02-19T08:45:13.757Z","url":"https://daily.dev/posts/XV0xg6oJP#c-zrtXKWoCt","author":{"@type":"Person","name":"Cris","url":"https://daily.dev/crismarket75","image":"https://media.daily.dev/image/upload/f_auto/v1650785995/avatars/EO6vvorN5yaqp8726MDgI"}}]} ```