UnratedFix available

Node.js 18.20.1 (LTS)

Type: patchSource: Node.js announcements1 source record

Node.js 18.20.1 is a security release addressing an HTTP/2 server crash and HTTP request smuggling. The release identifies both issues as security fixes, but does not specify affected version ranges.

Announced 3 Apr 2024Source revision 1

Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This is a security release.

Node.js

Node.js 18.20.1 (LTS)

Affected versions: Not stated in this extraction
Fixed versions: 18.20.1
Version 18.20.1 'Hydrogen' (LTS)
Prerequisites: Not stated in this extraction

Related CVEs: CVE-2024-27983
CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High)
CVE-2024-27982
CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)

Publisher severity

No explicit severity was extracted.

Event: #24195 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 06:31:26 GMT
Publisher date: Wed, 03 Apr 2024 14:27:39 GMT

Read the original announcement