Security feed

Node.js 20.20.0 (LTS) is a security release that includes fixes associated with six CVEs.

Node.js released security updates for active 20.x, 22.x, 24.x, and 25.x lines, addressing multiple vulnerabilities. The announcement lists updated release versions and reports high, medium, and low severity issues.

Node.js 24.13.0 is identified as a security release and includes fixes associated with six CVEs.

Node.js 25.3.0 is a security release containing fixes for multiple CVEs.

Node.js 24.13.1 includes fixes for CVE-2025-59465 and CVE-2026-21637.

Node.js 22.22.0 is a security release that includes fixes for multiple listed CVEs.

Node.js security updates address multiple vulnerabilities across the 20.x, 22.x, 24.x, and 25.x release lines. The announcement lists fixes for denial of service, permission model bypasses, crashes, and other issues.

Node.js 22.22.2 is a security release addressing multiple vulnerabilities, with fixes listed as High, Medium, and Low.

Node.js 24.14.1 is a security release that addresses multiple security issues.

Node.js 20.20.2 is a security release fixing multiple issues, including array index hash collision, timing-safe comparison, permission checks, and TLS callback handling.

Node.js 25.8.2 is a security release addressing multiple CVEs.