From Node.js Blog · 17 stories
Node.js Releases Versions 24.20.0 LTS and 26.8.0 Current
Node.js has released two new versions: 24.20.0 LTS (Long Term Support) and 26.8.0 (Current). Version 24.20.0 LTS introduces an expanded permission model, package maps for module loading, and WebAssembly JavaScript Promise Integration (JSPI). Version 26.8.0 includes updated root certificates, new cryptographic modes like SIV and GCM-SIV, and performance improvements for networking and histograms.
New integer hash developed for V8 to counter HashDoS attacks
A new integer hash has been developed for V8 to address CVE-2026-21717, enhancing resistance to HashDoS by making it hard for attackers to exploit hash collisions. This hash allows for quick reversibility while maintaining the performance necessary for applications using V8.
Node.js 26.8.1 Released to Correct Version Reporting Error
Node.js released version 26.8.1 as an out-of-band update to fix an issue where the `node --version` command incorrectly reported an alpha version. This update ensures accurate version identification for users and systems.
Node.js Releases Updates: 24.19.0 (LTS), 26.6.0 (Current), and 26.7.0 (Current)
Node.js has released multiple updates across its Long Term Support (LTS) and Current branches. Node.js 24.19.0 (LTS) introduces buffer handling improvements and OpenSSL configuration updates. Node.js 26.6.0 (Current) adds `ffi.getCurrentEventLoop` and `test_runner` features, while Node.js 26.7.0 (Current) includes support for loading private keys via STORE loaders in the crypto module and Perfetto support.
Node.js Releases Security Updates for Versions 22.23.2, 24.18.1, and 26.5.1
Node.js has released security updates for its 22.23.2 (LTS), 24.18.1 (LTS), and 26.5.1 (Current) versions. These updates address multiple vulnerabilities, including several high-severity issues related to http2 and permission handling, and are critical for maintaining application security and stability.
Node.js to release security updates for multiple versions on July 27, 2026
The Node.js project plans to release security updates for versions 26.x, 24.x, and 22.x on July 27, 2026. The updates will address high severity security vulnerabilities, emphasizing the need for users to maintain up-to-date software for system security.
Node.js Releases New Versions with Key Updates and Experimental Features
Node.js has released several updates across different versions: 22.22.3 and 24.18.0 (LTS) with security and crypto updates, and 25.8.1 to 26.5.0 (Current) with various enhancements including an experimental FFI module in 26.1.0. These changes improve Node.js stability, performance, and interoperability.
Node.js 22.23.1 LTS Release Includes Bug Fix
Node.js 22.23.1, now an LTS version, addresses a bug from the previous 22.23.0 security update. The fix aims to resolve unexpected behaviors affecting users post-update, ensuring stability in the LTS release cycle.
Node.js Releases Multiple LTS and Current Versions with Security Updates
Node.js released versions 20.20.2, 22.22.2, 24.14.1, 25.8.2, 22.23.0, 24.17.0, and 26.3.1, focusing on improving security. Fixes cover vulnerabilities in cryptographic functions, permissions, and TLS handling.
Node.js Releases Security Updates Addressing Multiple Vulnerabilities
Node.js has issued security updates for versions 20.x, 22.x, 24.x, 25.x, and 26.x to address various vulnerabilities that could lead to process crashes and security issues. The updates resolve problems in TLS error handling, HTTP request processing, WebCrypto implementation, and proxy credential exposure. These vulnerabilities, if exploited, could impact application stability and security.
Codemod Transforms Axios Code to WHATWG Fetch API
A new codemod is available to convert Axios code to the WHATWG Fetch API, which is natively supported in Node.js starting from version 18. This migration can lead to improved performance, better standards compliance, and reduced security risks by eliminating third-party dependencies.
Node.js 26.0.0 Released with Key Features and Deprecations
Node.js 26.0.0 has been released with the Temporal API enabled by default, V8 updated to 14.6, and Undici to 8.0. The release includes several deprecations and removals aimed at modernizing the platform, set to enter long-term support in October.
Node.js Collaboration Summit 2026 Discusses Release Schedule and API Changes
The 2026 Node.js Collaboration Summit reviewed the new release schedule starting with Node.js v27, aligning version numbers with the calendar year. A new Streams API was also proposed to unify stream handling between Node.js and the Web.
Node.js Security Bug Bounty Program Paused Due to Funding Issues
The Node.js project's security bug bounty program has been paused following the discontinuation of external funding from the Internet Bug Bounty initiative. This affects monetary rewards for security vulnerability reports, though Node.js will still accept and triage reports.
Node.js 25.9.0 Released with Key Updates and Enhancements
Node.js has released version 25.9.0, consolidating MockModuleOptions for better user alignment. This version introduces several SEMVER-MINOR changes including new cryptography algorithms and performance improvements in Buffer operations.
Node.js Releases Preview of Redesigned API Documentation
Node.js has launched a preview of its rebuilt API documentation at beta.docs.nodejs.org, featuring improved navigation, built-in search, and a unified design. This update aims to make finding and understanding Node.js APIs easier for developers.
Node.js Interactive 2026 Recap Highlights Maintainer Support and Interoperability
The Node.js Interactive 2026 conference, held within RenderATL and Atlanta Tech Week, focused on the importance of maintainers, standardization, and platform development for the future of Node.js. Discussions emphasized supporting the individuals who maintain critical open-source infrastructure and ensuring interoperability across JavaScript runtimes.