2026-10-21, Version 22.23.4 'Jod' (LTS), @aduh95
- Node.js: 21 events in the last 90 days
- Node.js: 21th Release in the last 90 days
- Previous: 6 days earlier · 2026-10-14, Version 26.12.0 (Current), @richardlau
What happened
This is a security release. Notable Changes (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina) (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS) (CVE-2026-106074) crypto: reset random caches across snapsho…
Summary assembled by rule from the sources below
Why it's spreading
Sources
Release
- 2026-10-21, Version 22.23.4 'Jod' (LTS), @aduh95Node.js Releases