Node.js: Virtual File System and WebCrypto Security Updates
Node.js added an experimental virtual file system module and implemented significant WebCrypto security hardening against prototype pollution attacks. Additional updates include test runner coverage improvements and stream transform fixes.
Duration: PT2M9S
Episode overview
This episode is a short developer briefing from Node.js.
It explains recent repository work in plain language.
- Show: Node.js
- Published: 2026-05-24T10:04:26Z
- Audio duration: PT2M9S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning. This is your Node.js development briefing for May 24th, 2026.
Matteo Collina merged a substantial addition - the experimental node:vfs subsystem. This 10,000-line update introduces VirtualFileSystem, MemoryProvider, and RealFSProvider classes behind the --experimental-vfs flag. The module doesn't yet integrate with node:fs or the module loader, with those features planned for…
Han5991 merged test runner improvements, fixing coverage support when using the run API with isolation set to 'none'. Previously, this configuration returned empty coverage reports due to V8 precise coverage not being enabled at bootstrap.
Trivikr merged a stream fix addressing fused stateless transforms. The update ensures each transform properly receives its own flush signal, preventing data processing issues when one transform emits data during flush.
A minor documentation fix by watilde corrected double spacing in modules.md.
Several additional commits landed focusing on WebCrypto security enhancements. Filip Skokan implemented comprehensive prototype pollution hardening across WebCrypto operations, modified key derivation functions to pass CryptoKey handles directly to native jobs, and…
Nearby episodes from Node.js
- TypeScript Coverage and HTTP/2 Session Fixes
- Security Fixes and Developer Tools Update
- WebCrypto Improvements and Security Fixes
- QUIC Security Enhancements and Test Improvements
- Weekly Recap - Virtual File Systems and WebCrypto Security
- npm 11.15.0 Update and Stream Improvements
- QUIC Enhancements and Stream Fixes
- WebCrypto Updates and Windows Build Optimization