OWASP Node.js Security Cheat Sheets
Official docs outline
8 sections- Node.js Application Security
Input validation, rate limiting, error handling and Express hardening.
- Node.js Server Security
HTTP headers, cookies and process-level protections.
- Node.js Platform Security
Dependency auditing, lock files and runtime protections.
- Node.js Docker
Securing Node.js container images.
- NPM Security
Install scripts, lockfiles, 2FA and package provenance.
- JavaScript and TypeScript Security
Language-level pitfalls and safe patterns.
- Prototype Pollution Prevention
Object.create(null), freezing and key validation.
- Next.js Security
Server actions, middleware auth and data exposure in Next.js.
Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.
More in OWASP
All 33- OWASP Injection Prevention Cheat Sheets
- OWASP Input Validation Cheat Sheets
- OWASP Kubernetes Security Cheat Sheet
- OWASP Language and Framework Cheat Sheets
- OWASP Logging Cheat Sheets
- OWASP MASVS
- OWASP Password Storage Cheat Sheet
- OWASP REST Security Cheat Sheet
- OWASP SAMM
- OWASP Secrets Management Cheat Sheet
- OWASP Session Management Cheat Sheet
- OWASP SSRF Prevention Cheat Sheet