Ulises Gascón

@kom_256

#OpenSource Maintainer (@nodejs, @UseExpressJS, Lodash, @yeoman...), @TC39 Delegate and #Maker | He/Him

Madrid, Spain ulisesgascon.com Joined December 2012

1.1K Following 5.5K Followers 9.6K Posts

Latest posts 5

Pinned post

Ulises Gascón @kom_256 May 10, 2024

🥳 It as been officially released on #𝗔𝗺𝗮𝘇𝗼𝗻 today #Nodejs for #beginners! ✨

A Comprehensive guide to building efficient, full-featured web applications with Node.js

📚 Order now at:
- Amazon (US): packt.link/S0w3Z
- Amazon (Spain): packt.link/y1PCt

Book cover. Node.js for Beginners by Ulises Gascón (1st edition Packt). A Comprehensive guide to building efficient, full-featured web applications with Node.js

Ulises Gascón @kom_256 1d

“I used to send reports to maintainers and wait months for a reply,” said Max Tokens, the top-earning YES trader in the beta. “These days I buy YES on the project first and then file the report.” 🤣

nesbitt.io/2026/11/09/int…

nesbitt.io Introducing Ninety Now trading: curl, OpenSSL, lodash and PHP

Ulises Gascón @kom_256 4d

🚨 undici shipped a coordinated security release fixing 6 CVEs (1 high, 5 medium) across 7.x and 8.x: cache/redirect cross-user disclosure and poisoning, a Subresource Integrity bypass, and a denial of service.

Upgrade to 7.30.2 or 8.12.4.

github.com/nodejs/undici/…

github.com Release v8.12.4 · nodejs/undici ⚠️ Security Fixes This release fixes six vulnerabilities. CVE-2026-116592 / GHSA-mqg3-3v4r-cm32 (high) Undici 8.12.2 and 8.12.3 could cache the final response from a redirect chain under the origin...

Ulises Gascón @kom_256 6d

🎉 What a cool website!

seirs.dev

www.seirs.dev SEIRs — Security Engineers in Residence Hands-on security capacity, embedded in open source ecosystems. An Alpha-Omega initiative.

Ulises Gascón @kom_256 Nov 3

🧭 So You Got Your First GHSA. Don't Panic.

100,000 CVEs will be published this year, and most of the triage lands on volunteer maintainers. The first advisory is where people stall. An honest guide from maintainers to maintainers:

alpha-omega.dev/blog/so-you-go…

alpha-omega.dev Handling Your First GHSA: A Guide for Open Source Maintainers Learn how to confidently handle your first GitHub Security Advisory (GHSA) with this step-by-step guide for open source maintainers, covering everything from initial triage to publishing the fix.