What is a Vulnerability and What’s Not? Making Sense of Node.js and Express Threat Models
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/what-is-a-vulnerability-and-whats-not-making-sense-of-nodejs-and-express-threat-modelssummary
Explains the Node.js and Express threat models the speaker co-authored, detailing their explicit trust boundaries and assumptions. Uses real-world vulnerabilities to show which issues fit those models, clarifies common misconceptions about severity and exploitability, and discusses implications for bug bounties and long-term fixes.
AI-written summary · about
