Scope and verification notes
Node.js runtime: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.