Skip to content
Heist/ feed
UnratedFix available

Node.js Security Releases

Type: patchSource: Node.js announcements1 source record

Node.js security updates address five vulnerabilities across the 22.x, 20.x, and 18.x release lines. Downloads listed are Node.js v18.20.4, v20.15.1, and v22.4.1.

Announced Source revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

Security releases available Updates are now available for the 22.x, 20.x, 18.x Node.js release lines for the following issues.

Node.js

Node.js v18.20.4
Affected versions
22.x
Impact: This vulnerability affects all Windows users in active release lines: 22.x, 20.x, 18.x
20.x
Impact: This vulnerability affects all Windows users in active release lines: 22.x, 20.x, 18.x
18.x
Impact: This vulnerability affects all Windows users in active release lines: 22.x, 20.x, 18.x
Fixed versions
Node.js v18.20.4
Node.js v18.20.4
Node.js v20.15.1
Node.js v20.15.1
Node.js v22.4.1
Node.js v22.4.1
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2024-27980
Bypass incomplete fix of CVE-2024-27980 (CVE-2024-36138)
CVE-2024-36138
Bypass incomplete fix of CVE-2024-27980 (CVE-2024-36138)
CVE-2024-22020
Bypass network import restriction via data URL (CVE-2024-22020)
CVE-2024-36137
fs.fchown/fchmod bypasses permission model (CVE-2024-36137)
CVE-2024-22018
fs.lstat bypasses permission model (CVE-2024-22018)
CVE-2024-37372
Permission model improperly processes UNC paths (CVE-2024-37372)

Publisher severity

No explicit severity was extracted.

Event
#23139 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement