UnratedFix available
Node.js 20.19.2 (LTS)
Node.js 20.19.2 is a security release that fixes issues in async crypto error handling and filesystem request cleanup, and updates llhttp.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release.
Node.js
Node.js 20.19.2 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 20.19.2
Version 20.19.2 'Iron' (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2025-23166
(CVE-2025-23166) fix error handling on async crypto operation
CVE-2025-23167(CVE-2025-23167) (SEMVER-MAJOR) update llhttp to 9.2.0
CVE-2025-23165(CVE-2025-23165) add missing call to uv_fs_req_cleanup
CVE-2024-27982(CVE-2024-27982) http: do not allow OBS fold in headers by default
Publisher severity
No explicit severity was extracted.
- Event
- #19550 · Revision 1
- Added to Heist Feed
- Publisher date