UnratedFix available
Node.js 25.3.0 (Current)
Node.js 25.3.0 is a security release containing fixes for multiple CVEs.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release.
Node.js
Node.js 25.3.0 (Current)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 25.3.0
Node.js 25.3.0 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2025-59465
(CVE-2025-59465) add TLSSocket default error handler
CVE-2026-21636(CVE-2026-21636) add network check on pipe_wrap connect
CVE-2025-55130(CVE-2025-55130) require full read and write to symlink APIs
CVE-2025-55132(CVE-2025-55132) disable futimes when permission model is enabled
CVE-2025-59466(CVE-2025-59466) rethrow stack overflow exceptions in async_hooks
CVE-2025-55131(CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle
CVE-2026-21637(CVE-2026-21637) route callback exceptions through error handlers
Publisher severity
No explicit severity was extracted.
- Event
- #19347 · Revision 1
- Added to Heist Feed
- Publisher date