Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 0 additions & 6 deletions apps/site/pages/en/blog/release/v20.20.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,17 +12,11 @@ This is a security release.

### Notable Changes

lib:

- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/802>
- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/797>
lib,permission:
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/760>
src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/773>
src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) <https://github.com/nodejs-private/node-private/pull/759>
tls:
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/796>

### Commits
Expand Down
6 changes: 0 additions & 6 deletions apps/site/pages/en/blog/release/v22.22.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,17 +12,11 @@ This is a security release.

### Notable Changes

lib:

- (CVE-2025-59465) add TLSSocket default error handler
- (CVE-2025-55132) disable futimes when permission model is enabled
lib,permission:
- (CVE-2025-55130) require full read and write to symlink APIs
src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks
src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle
tls:
- (CVE-2026-21637) route callback exceptions through error handlers

### Commits
Expand Down
6 changes: 0 additions & 6 deletions apps/site/pages/en/blog/release/v24.13.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,17 +12,11 @@ This is a security release.

### Notable Changes

lib:

- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/797>
- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/748>
lib,permission:
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/760>
src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/773>
src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) <https://github.com/nodejs-private/node-private/pull/759>
tls:
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/796>

### Commits
Expand Down
6 changes: 0 additions & 6 deletions apps/site/pages/en/blog/release/v25.3.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,18 +12,12 @@ This is a security release.

### Notable Changes

lib:

- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/750>
permission:
- (CVE-2026-21636) add network check on pipe_wrap connect (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/784>
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/760>
- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/748>
src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/773>
src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) <https://github.com/nodejs-private/node-private/pull/759>
tls:
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/790>

### Commits
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -147,10 +147,10 @@ Thank you, to oriotie for reporting this vulnerability and thank you RafaelGSS f

## Downloads and release details

- [Node.js v20.19.7](/blog/release/v20.19.7/)
- [Node.js v22.21.2](/blog/release/v22.21.2/)
- [Node.js v24.12.1](/blog/release/v24.12.1/)
- [Node.js v25.2.2](/blog/release/v25.2.2/)
- [Node.js 20.20.0](/blog/release/v20.20.0/)
- [Node.js 22.22.0](/blog/release/v22.22.0/)
- [Node.js 24.13.0](/blog/release/v24.13.0/)
- [Node.js 25.3.0](/blog/release/v25.3.0/)

# Summary

Expand Down
Loading