UnratedFix available
Node.js 22.22.2 (LTS)
Node.js 22.22.2 is a security release addressing multiple vulnerabilities, with fixes listed as High, Medium, and Low.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release.
Node.js
Node.js 22.22.2 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 22.22.2
Version 22.22.2 'Jod' (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2026-21637
(CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
CVE-2026-21710(CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
CVE-2026-21713(CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) - Medium
CVE-2026-21714(CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
CVE-2026-21717(CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
CVE-2026-21715(CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
CVE-2026-21716(CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low
Publisher severity
No explicit severity was extracted.
- Event
- #19341 · Revision 1
- Added to Heist Feed
- Publisher date