If you run production workloads on Node.js, this is one of those updates you should not postpone. A newly disclosed vulnerability shows how a subtle flaw deep inside Node's async handling can crash entire servers with nothing more than carefully triggered recursion.

