# Vulnerabilities in NodeJS C/C++ add-on extensions

DevFeed: [Vulnerabilities in NodeJS C/C++ add-on extensions](<https://devfeed.tech/articles/vulnerabilities-in-nodejs-c-c-add-on-extensions-8035.md>)

Original publisher: [Read original article](<https://snyk.io/blog/nodejs-add-on-extensions/>)

Author: Alessio Della Libera

Published: 2024-08-14T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [C++](<https://devfeed.tech/topics/c-plus-plus.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>)

Tags: [add-ons](<https://devfeed.tech/tags/add-ons.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [c-c-plus-plus](<https://devfeed.tech/tags/c-c-plus-plus.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [extensions](<https://devfeed.tech/tags/extensions.md>), [interest](<https://devfeed.tech/tags/interest.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [npm-packages](<https://devfeed.tech/tags/npm-packages.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [secrel](<https://devfeed.tech/tags/secrel.md>), [security](<https://devfeed.tech/tags/security.md>), [security-labs](<https://devfeed.tech/tags/security-labs.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

An overview of security vulnerabilities and vulnerable patterns in NodeJS C/C++ add-ons, with remediation guidance for open-source maintainers.

## Source excerpt

In this blog post, we aim to provide an overview of common security vulnerabilities and vulnerable patterns that can occur when writing C/C++ add-ons in NodeJS.