2026-10-21, Version 26.12.1 (Current), @aduh95 prepared by @RafaelGSS
- Node.js: 21 events in the last 90 days
- Node.js: 21th Release in the last 90 days
- Previous: earlier the same day · 2026-10-21, Version 24.22.1 'Krypton' (LTS), @aduh95
What happened
This is a security release. Notable Changes (CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina) – High (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) – High (CVE-2026-105483) tls: fix ip normalization regression (James M Snell) – High (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) – High (CVE-2026-111497)…
Summary assembled by rule from the sources below