#NodeCongress2025

What is a Vulnerability and What’s Not? Making Sense of Node.js and Express Threat Models by Ulises Gascón In this talk, we will discuss security, vulnerabilities, and how to improve your overall security. We will explore various vulnerabilities and the difference between developer errors and misconfigurat...

🔐 Is it a vulnerability, or just a misunderstood feature?

At #NodeCongress2025, I broke it down in my talk: "What is a Vulnerability and What’s Not"

Topics:
👉 Real vs. imagined risks in @nodejs.org and @expressjs.bsky.social
👉 Why #threatModels matter

🎥 Watch: gitnation.com/contents/wha...