International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 22 · Tier C4 sources

Re: Node.js security release pre-alert

oss-security ·

The Brief · written from 4 sources

  • Node.js released security updates for its 22, 24 and 26 release lines on 2026-11-11.
  • Updated versions include Node.js 26.13.1 (LTS), 24.22.3 (LTS) and 22.23.5 (LTS).
  • Details are in the official Node.js vulnerability post for the November 2026 security releases.

Why it matters

Developers running affected Node.js lines should move to the patched point releases, since security fixes are included in these updates.

Who’s affected

  • Teams running Node.js 22 (LTS)
  • Teams running Node.js 24 (LTS)
  • Teams running Node.js 26 (LTS)

What to do

  1. Upgrade to Node.js 22.23.5, 24.22.3 or 26.13.1 depending on your release line.

Posted by Antoine du Hamel on Nov 11 Releases are out, more info at https://nodejs.org/en/blog/vulnerability/november-2026-security-releases

Read the full story at seclists.org ↗

Timeline

  1. Node.js security pre-alert discussed on oss-sec, releases announced as out

  2. Node.js 26.13.1 (LTS) released

  3. Node.js 24.22.3 (LTS) released

  4. Node.js 22.23.5 (LTS) released

  5. Node.js Blog

    Node.js 22.23.5 (LTS)

  6. Node.js Blog

    Node.js 24.22.3 (LTS)

  7. Node.js Blog

    Node.js 26.13.1 (LTS)

  8. Open Source Security

    Re: Node.js security release pre-alert

Full coverage · 4 sources

How do you feel about this?

0 Comments