2026-07-29, Version 22.23.2 'Jod' (LTS), @marco-ippolito
- Node.js: 10 events in the last 90 days
- Node.js: 10th Release in the last 90 days
- Previous: 21 days earlier · 2026-07-08, Version 26.5.0 (Current), @richardlau
What happened
This is a security release. Notable Changes ( CVE-2026-56846 ) http2: retain header memory in session accounting (Matteo Collina) – High ( CVE-2026-56848 ) http2: defer rst stream while in scope (Matteo Collina) – High ( CVE-2026-58043 ) permission: avoid granting radix split nodes (RafaelGSS) – High ( CVE-2026-56850 ) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium ( CVE-2026-58040 ) https: bind…
Summary assembled by rule from the sources below
Why it's spreading
Sources
Release
- 2026-07-29, Version 22.23.2 'Jod' (LTS), @marco-ippolitoNode.js Releases