UnratedFix available
Node.js 24.4.1 (Current)
Node.js 24.4.1 is a security release addressing HashDoS in V8 and a Windows reserved-device-name path traversal protection bypass.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release.
Node.js
Node.js 24.4.1 (Current)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 24.4.1
Node.js 24.4.1 (Current)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2025-27209
(CVE-2025-27209) HashDoS in V8 with new RapidHash algorithm
CVE-2025-27210(CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
Publisher severity
No explicit severity was extracted.
- Event
- #19354 · Revision 1
- Added to Heist Feed
- Publisher date