A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized parser input.

Parse, the Y Combinator-backed startup that powers the back-end for mobile apps like Band of the Day and Hipmunk, is rolling out support for mobile web apps too. The San Francisco startup has a new ...