September 2020 Security Releases
(Update 15-Sept-2020) Security releases availableUpdates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues. HTTP Request Smuggling due to CR-to-Hyphen...
View ArticleNode v14.12.0 (Current)
Notable changes deps: update to uvwasi 0.0.11 (Colin Ihrig) #35104 n-api: create N-API version 7 (Gabriel Schulhof) #35199 add more property defaults (Gerhard Stoebich) #35214 Commits [5229ffadcf] -...
View ArticleNode v14.13.0 (Current)
Notable Changes [19b95a7fa9] - (SEMVER-MINOR) deps: upgrade to libuv 1.40.0 (Colin Ihrig) #35333 [f551f52f83] - (SEMVER-MINOR) module: named exports for CJS via static analysis (Guy Bedford) #35249...
View ArticleNode v12.19.0 (LTS)
Notable Changes [d065334d42] - (SEMVER-MINOR) module: package "imports" field (Guy Bedford) #34117 [b9d0f73c7c] - (SEMVER-MINOR) n-api: create N-API version 7 (Gabriel Schulhof) #35199 [53c9975673] -...
View ArticleNode v14.13.1 (Current)
Notable Changes fs: remove experimental from rmdir recursive (Benjamin Coe) #35171 Commits [f36476d9d6] - build: fix CQ after latest ncu release (Mary Marchini) #35468 [7dc6b2fac7] - build: add support...
View ArticleNode v14.14.0 (Current)
Notable Changes [7e7afc5186] - crypto: update certdata to NSS 3.56 (Shelley Vohr) #35546 [8877430530] - doc: add aduh95 to collaborators (Antoine du Hamel) #35542 [1610728d7c] - (SEMVER-MINOR) fs: add...
View ArticleNode v15.0.0 (Current)
Notable ChangesDeprecations and Removals [a11788736a] - (SEMVER-MAJOR) build: remove --build-v8-with-gn configure option (Yang Guo) #27576 [89428c7a2d] - (SEMVER-MAJOR) build: drop support for VS2017...
View ArticleNode v15.0.1 (Current)
Notable changes crypto: fix regression on randomFillSync (James M Snell) #35723 This fixes issue https://github.com/nodejs/node/issues/35722. deps: upgrade npm to 7.0.3 (Ruy Adorno) #35724 doc: add...
View ArticleNode v10.23.0 (LTS)
Notable changes deps: upgrade npm to 6.14.8 (Ruy Adorno) #34834 n-api: create N-API version 7 (Gabriel Schulhof) #35199 expose napi_build_version variable (NickNaso) #27835 tools: add debug...
View ArticleNode v14.15.0 (LTS)
Notable ChangesThis release marks the transition of Node.js 14.x into Long Term Support (LTS) with the codename 'Fermium'. The 14.x release line now moves into "Active LTS" and will remain so until...
View ArticleNode v15.1.0 (Current)
Notable ChangesDiagnostics channel (experimental module)diagnostics_channel is a new experimental module that provides an API to create named channels to report arbitrary message data for diagnostics...
View ArticleNode v15.2.0 (Current)
Notable changes events: getEventListeners static (Benjamin Gruenbaum) #35991 fs: support abortsignal in writeFile (Benjamin Gruenbaum) #35993 add support for AbortSignal in readFile (Benjamin...
View ArticleNovember 2020 Security Releases
SummaryThe Node.js project will release new versions of 15.x, 14.x and 12.x on or shortly after Monday, November 16th, 2020. These releases will fix: One high severity issue ImpactThe 15.x release line...
View ArticleNode v15.2.1 (Current)
Notable changesThis is a security release. Vulnerabilities fixed: CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for...
View ArticleNode v14.15.1 (LTS)
Notable changesThis is a security release. Vulnerabilities fixed: CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for...
View ArticleNode v12.19.1 (LTS)
Notable changesThis is a security release. Vulnerabilities fixed: CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for...
View ArticleNode v15.3.0 (Current)
Notable Changes [6349b1d673] - (SEMVER-MINOR) dns: add a cancel() method to the promise Resolver (Szymon Marczak) #33099 [9ce9b016e6] - (SEMVER-MINOR) events: add max listener warning for EventTarget...
View ArticleNode v12.20.0 (LTS)
Notable Changes crypto: update certdata to NSS 3.56 (Shelley Vohr) https://github.com/nodejs/node/pull/35546 deps: update llhttp to 2.1.3 (Fedor Indutny) https://github.com/nodejs/node/pull/35435...
View ArticleNode v15.4.0 (Current)
Notable Changes child_processes: add AbortSignal support (Benjamin Gruenbaum) #36308 deps: update ICU to 68.1 (Michaël Zasso) #36187 events: support signal in EventTarget (Benjamin Gruenbaum) #36258...
View ArticleJanuary 2021 Security Releases
SummaryThe Node.js project will release new versions of all supported release lines on or shortly after Monday January 4th, 2021. These releases will fix: Two high severity issues One low severity...
View Article