Rough week to run Node-based web apps.
WebContainers are the infinitely scalable secure sandbox for Node.js. Untrusted code runs isolated in the browser, away from your OS and your servers. Same tech powering @boltdotnew
Get a demo: https://t.co/OzEPW4sIdV More below ๐
โ ๏ธ Node.js is vulnerable to remote code execution.
CVE-2026-111497 (high): A Node.js process that decompresses attacker-controlled Brotli data can be made to leak memory or run arbitrary code.
Youโre exposed if your app or a library decompresses bad Brotli data (e.g. the built-in fetch(), body-parser)
Aikido detects this. Patches are available.
Opus 4.7 is live in bolt.
The best app builder needs the best model underneath it. 4.7 is that model - highest score we've ever clocked on long, complex builds.
Go ship something.
As we move into onboarding more OSS projects to https://t.co/5AUOsdVT8j and are releasing the next million preview packages, we are thrilled to announce that @Cloudflare is now backing our data infrastructure!
https://t.co/5VT777gKDO
Today we're announcing $105.5m in funding to take Bolt to new heights! ๐
Our Series B was led by Emergence & GV, with participation from Madrona, The Chainsmokers (Mantis), Conviction, and some of the best operators building in devtools & AI ๐