Security feed

advisoryUnratedNode.js announcements

Beware of End-of-Life Node.js Versions - Upgrade or Seek Post-EOL Support

Node.js 18 and earlier are unsupported and do not receive security patches. The article advises upgrading to a supported Node.js version or obtaining commercial post-EOL support.

Announced

Machine-extracted · Revision 1Original source
Evidence and details

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

Node.js 18 and all earlier versions are End-Of-Life. They are now completely unsupported, meaning they receive no updates, including security patches.

Node.js

Node.js 18 and all earlier versions are End-Of-Life.
Affected versions
18 and all earlier versions
Node.js 18 and all earlier versions are End-Of-Life.
Fixed versions
Not stated in this extraction
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2025-23167
https://nvd.nist.gov/vuln/detail/CVE-2025-23167 affects 18, 16, 14 (llhttp) - medium
CVE-2023-5678
https://nvd.nist.gov/vuln/detail/CVE-2023-5678 affects 16, 14 (openssl) - medium
CVE-2024-22019
https://nvd.nist.gov/vuln/detail/CVE-2024-22019 affects 16, 14 (llhttp) - high
CVE-2021-39135
https://nvd.nist.gov/vuln/detail/CVE-2021-39135 affects 14 (npm) - high

Publisher severity

No explicit severity was extracted.

Event
#19879 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement