|
| 1 | +--- |
| 2 | +date: '2026-01-13T13:58:10.153Z' |
| 3 | +category: release |
| 4 | +title: Node.js 24.13.0 (LTS) |
| 5 | +layout: blog-post |
| 6 | +author: Marco Ippolito |
| 7 | +--- |
| 8 | + |
| 9 | +## 2026-01-13, Version 24.13.0 'Krypton' (LTS), @marco-ippolito |
| 10 | + |
| 11 | +This is a security release. |
| 12 | + |
| 13 | +### Notable Changes |
| 14 | + |
| 15 | +lib: |
| 16 | + |
| 17 | +- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/797> |
| 18 | +- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/748> |
| 19 | + lib,permission: |
| 20 | +- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/760> |
| 21 | + src: |
| 22 | +- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/773> |
| 23 | + src,lib: |
| 24 | +- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) <https://github.com/nodejs-private/node-private/pull/759> |
| 25 | + tls: |
| 26 | +- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/796> |
| 27 | + |
| 28 | +### Commits |
| 29 | + |
| 30 | +- \[[`2092785d01`](https://github.com/nodejs/node/commit/2092785d01)] - **deps**: update c-ares to v1.34.6 (Node.js GitHub Bot) [#60997](https://github.com/nodejs/node/pull/60997) |
| 31 | +- \[[`3e58b7f2af`](https://github.com/nodejs/node/commit/3e58b7f2af)] - **deps**: update undici to 7.18.2 (Node.js GitHub Bot) [#61283](https://github.com/nodejs/node/pull/61283) |
| 32 | +- \[[`4ba536a5a6`](https://github.com/nodejs/node/commit/4ba536a5a6)] - **(CVE-2025-59465)** **lib**: add TLSSocket default error handler (RafaelGSS) [nodejs-private/node-private#797](https://github.com/nodejs-private/node-private/pull/797) |
| 33 | +- \[[`89adaa21fd`](https://github.com/nodejs/node/commit/89adaa21fd)] - **(CVE-2025-55132)** **lib**: disable futimes when permission model is enabled (RafaelGSS) [nodejs-private/node-private#748](https://github.com/nodejs-private/node-private/pull/748) |
| 34 | +- \[[`7302b4dae1`](https://github.com/nodejs/node/commit/7302b4dae1)] - **(CVE-2025-55130)** **lib,permission**: require full read and write to symlink APIs (RafaelGSS) [nodejs-private/node-private#760](https://github.com/nodejs-private/node-private/pull/760) |
| 35 | +- \[[`ac030753c4`](https://github.com/nodejs/node/commit/ac030753c4)] - **(CVE-2025-59466)** **src**: rethrow stack overflow exceptions in async_hooks (Matteo Collina) [nodejs-private/node-private#773](https://github.com/nodejs-private/node-private/pull/773) |
| 36 | +- \[[`20075692fe`](https://github.com/nodejs/node/commit/20075692fe)] - **(CVE-2025-55131)** **src,lib**: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) [nodejs-private/node-private#759](https://github.com/nodejs-private/node-private/pull/759) |
| 37 | +- \[[`20591b0618`](https://github.com/nodejs/node/commit/20591b0618)] - **(CVE-2026-21637)** **tls**: route callback exceptions through error handlers (Matteo Collina) [nodejs-private/node-private#796](https://github.com/nodejs-private/node-private/pull/796) |
| 38 | + |
| 39 | +Windows 64-bit Installer: https://nodejs.org/dist/v24.13.0/node-v24.13.0-x64.msi \ |
| 40 | +Windows ARM 64-bit Installer: https://nodejs.org/dist/v24.13.0/node-v24.13.0-arm64.msi \ |
| 41 | +Windows 64-bit Binary: https://nodejs.org/dist/v24.13.0/win-x64/node.exe \ |
| 42 | +Windows ARM 64-bit Binary: https://nodejs.org/dist/v24.13.0/win-arm64/node.exe \ |
| 43 | +macOS 64-bit Installer: https://nodejs.org/dist/v24.13.0/node-v24.13.0.pkg \ |
| 44 | +macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-darwin-arm64.tar.gz \ |
| 45 | +macOS Intel 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-darwin-x64.tar.gz \ |
| 46 | +Linux 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-linux-x64.tar.xz \ |
| 47 | +Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-linux-ppc64le.tar.xz \ |
| 48 | +Linux s390x 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-linux-s390x.tar.xz \ |
| 49 | +AIX 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-aix-ppc64.tar.gz \ |
| 50 | +ARMv8 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-linux-arm64.tar.xz \ |
| 51 | +Source Code: https://nodejs.org/dist/v24.13.0/node-v24.13.0.tar.gz \ |
| 52 | +Other release files: https://nodejs.org/dist/v24.13.0/ \ |
| 53 | +Documentation: https://nodejs.org/docs/v24.13.0/api/ |
| 54 | + |
| 55 | +### SHASUMS |
| 56 | + |
| 57 | +``` |
| 58 | +-----BEGIN PGP SIGNED MESSAGE----- |
| 59 | +Hash: SHA256 |
| 60 | +
|
| 61 | +ac21e9af08a4d54b057d800c03bc95322946952b8daa811cada98bfb66a8ce8f node-v24.13.0-aix-ppc64.tar.gz |
| 62 | +9ef67a1cc2b64de38bdd6139d7967699915312df37e9b176277631165e39798d node-v24.13.0-arm64.msi |
| 63 | +d595961e563fcae057d4a0fb992f175a54d97fcc4a14dc2d474d92ddeea3b9f8 node-v24.13.0-darwin-arm64.tar.gz |
| 64 | +c59a517e9147f25c6167426875a571432f1478c1d7ee7ecc10baa46b0d0e8545 node-v24.13.0-darwin-arm64.tar.xz |
| 65 | +6f03c1b48ddbe1b129a6f8038be08e0899f05f17185b4d3e4350180ab669a7f3 node-v24.13.0-darwin-x64.tar.gz |
| 66 | +4ca0a48233f091a2a69ec28dd58e59f394a1b2d4f052b6c6b10f760377fe266f node-v24.13.0-darwin-x64.tar.xz |
| 67 | +f5589e2b4b962af05381a31d11c3c9b004daf8bd63c95c0e1a406600daa8ae88 node-v24.13.0-headers.tar.gz |
| 68 | +9344eddda6621e46d77b26f1b93db25a52592f9eb199f300440fe3c30802f186 node-v24.13.0-headers.tar.xz |
| 69 | +0f6d40b94c6a2eb6b4c240ffc8b9fd3ada7ab044c177dd413c06e1ef9a63f081 node-v24.13.0-linux-arm64.tar.gz |
| 70 | +aa881151bd0f9f154a0424dd60a72e9ce10672619121658c278a24327ef46831 node-v24.13.0-linux-arm64.tar.xz |
| 71 | +18011930b182a1c5b49d2326191fdba58270bdf7b45b8c7df855ef31931b148a node-v24.13.0-linux-ppc64le.tar.gz |
| 72 | +babe8c72871c751ed288fc1a1aeb2a95d830f732e43d9e4ab0cf137e3273eb8e node-v24.13.0-linux-ppc64le.tar.xz |
| 73 | +5744610b624f2e82ae1ca279d8ece7b8ca466437239533d2d033565303bc1d39 node-v24.13.0-linux-s390x.tar.gz |
| 74 | +75f6f780442b7b98a357fd9cf6e383c3d22a8efe9ed4ee1d54ea68ff16889904 node-v24.13.0-linux-s390x.tar.xz |
| 75 | +6223aad1a81f9d1e7b682c59d12e2de233f7b4c37475cd40d1c89c42b737ffa8 node-v24.13.0-linux-x64.tar.gz |
| 76 | +e798599612f4bb71333a3397ab0d095fd62214e115aea45aa858a145fc72d67e node-v24.13.0-linux-x64.tar.xz |
| 77 | +b62d61eb92a1fdcc3fc4951fc087f206eb6f46d088bd9a6630892f4eb5203d13 node-v24.13.0.pkg |
| 78 | +54cb58921b4ce2831c6690ee823a3d39cfbf2b75f4e556c4c2bde90f3d8fd1ca node-v24.13.0.tar.gz |
| 79 | +320fe909cbb347dcf516201e4964ef177b8138df9a7f810d0d54950481b3158b node-v24.13.0.tar.xz |
| 80 | +724fcf1a20ea345cc38fb970044a6f1617a1dc47e477ee5a92fe8b243b95700a node-v24.13.0-win-arm64.7z |
| 81 | +92b9f9b0c0c123e11e4afc535f0ec19cd987465eea506427553a49971364158a node-v24.13.0-win-arm64.zip |
| 82 | +04d3619e21c07a84043accbacc73256431c6adbea65d4c026c6eb22ff6fd453a node-v24.13.0-win-x64.7z |
| 83 | +ca2742695be8de44027d71b3f53a4bdb36009b95575fe1ae6f7f0b5ce091cb88 node-v24.13.0-win-x64.zip |
| 84 | +1a5f0cd914386f3be2fbaf03ad9fff808a588ce50d2e155f338fad5530575f18 node-v24.13.0-x64.msi |
| 85 | +91e25b2ef61ee30a9e6afce0f336b4d55d688c3717244e496fa11d69fc3a1717 win-arm64/node.exe |
| 86 | +afef88b389be8ac30974d2cf69de26001f95f1e9efe1811f2e8467c4cdfe05d0 win-arm64/node.lib |
| 87 | +4e3e5e11d6c60e66f65e1292bf524afeb6293f3d96ffdfbbe6756287be307e78 win-arm64/node_pdb.7z |
| 88 | +087c7cf72188ce884288ddcd818f799f76e20ee1a1536d624e3f5baea1313c05 win-arm64/node_pdb.zip |
| 89 | +d14ba95cdce1ef7dc9ad3ac74949ca5db38b27378ee30f30a23cf26f9e875a11 win-x64/node.exe |
| 90 | +be205f2934c17fbd56ce6cdfcfbeb2f6a85061d5141e7a58eba240a8477a12fd win-x64/node.lib |
| 91 | +1120267174deb5e7661e5b9b0a291e55c1937155e1dedd85018cb83eb48f466c win-x64/node_pdb.7z |
| 92 | +e96ce3ea96ff4067f7cbeece8fe11a06f925676e956859a86e7421d325080eb1 win-x64/node_pdb.zip |
| 93 | +-----BEGIN PGP SIGNATURE----- |
| 94 | +
|
| 95 | +iQIzBAEBCAAdFiEEzGj1oxBv9EgyLkjtJ/XjjVsKIV8FAmlmTrkACgkQJ/XjjVsK |
| 96 | +IV8PPg//Sh16vYqdVCcCbh/omr5nqxtTxcJvNmWN4mYA524yPw3fEXfXCIOE2d8T |
| 97 | +nRkN0JRPL56PHH6RTbcql8U1S2jx7RpV3XJw0yFTVOXDa48yGbfBYGbPjnCmoho5 |
| 98 | +ZMmQQjfmT4hcwckM8nXVlmX91BMyeCwtRqMN3ymTUTcACV5lFGfC7Ki1Gcu2hg3o |
| 99 | +4jZciwOyn4FP5Em2ovIWFk+XqyQ9gMaGsdNX4zPYDqvYFR9qelgh3Sc1oUPflnir |
| 100 | +1MuCyj2RzNymgrJ0s9kLpFHHERohZ8S5qGgZq9aucwPupwkwvByKCuvJ4C+qkJYh |
| 101 | +7j6CDrsuRpHXFnTuuc3YdSnlj0A6oIeyEVwPFgBL7DNMEohDMFHKc8ERI1nQPFEb |
| 102 | +he08EG2vCnQRUScHO6RY/3qcPPZ7BsCE6TCDwGSVkX+EgPEneYS4xs76JBOxOzi3 |
| 103 | +dNxQ2XTZa+Q/BnFHLZFMs7nKn5cz+BqZEc5DNlMVhSZmVf0swuBnAPRz2J46dWAr |
| 104 | +/Bo8FG44I9M3pmgDMSJd4vT4diqSiOTyJyHTNJbT6beK/esgH9SD1Ink8+AlRGyb |
| 105 | +qEMaTasTEvRmRIP1t4NcuMFihvm5Y9f+ifajWrmJ65nv2JEEziUL2QM5htbLUPst |
| 106 | +T3QThZNVItW37IVHhc3ILszlOc4nCTV+5+OT9ObOv/wIQSwMltA= |
| 107 | +=vpzY |
| 108 | +-----END PGP SIGNATURE----- |
| 109 | +``` |
0 commit comments