@@ -9,7 +9,7 @@ author: The Node.js Project
99
1010## Security releases available
1111
12- Updates are now available for the 25.x, 24.x, 22.x, 20.x Node.js release lines
12+ Updates are now available for the 25.x, 24.x, 22.x, and 20.x Node.js release lines
1313to address:
1414
1515- 3 high severity issues.
@@ -47,7 +47,7 @@ expected isolation guarantees and enables arbitrary file read/write, leading to
4747
4848Impact:
4949
50- - This vulnerability affects users of the permission model on Node.js v20, v22, v24 , and v25 .
50+ - This vulnerability affects users of the permission model on Node.js 20.x, 22.x, 24.x , and 25.x .
5151
5252Thank you, to natann for reporting this vulnerability and thank you RafaelGSS for fixing it.
5353
@@ -68,7 +68,7 @@ server.on('secureConnection', socket => {
6868
6969Impact:
7070
71- - This vulnerability affects all users in active release lines: 20.x, 22.x, 24.x, 25.x
71+ - This vulnerability affects all users in active release lines: 20.x, 22.x, 24.x, and 25.x
7272
7373Thank you, to dantt for reporting this vulnerability and thank you RafaelGSS for fixing it.
7474
@@ -90,7 +90,7 @@ for details.
9090
9191Impact:
9292
93- - This vulnerability affects all users in active release lines: 20.x, 22.x, 24.x, 25.x
93+ - This vulnerability affects all users in active release lines: 20.x, 22.x, 24.x, and 25.x
9494
9595Thank you, to Andrew MacPherson (AndrewMohawk) for identifying & aaron_vercel for reporting this vulnerability and thank you mcollina for fixing it.
9696
@@ -103,10 +103,10 @@ TLS connections. Over time this can lead to resource exhaustion and denial of se
103103
104104Impact:
105105
106- - This vulnerability was already fixed on Node.js v24 .12.0. It has no impact on
106+ - This vulnerability was already fixed on Node.js 24 .12.0. It has no impact on
107107 other active release lines.
108108
109- This public CVE is only issued for the affected v24 releases.
109+ This public CVE is only issued for the affected 24.x releases.
110110
111111Thank you, to giant_anteater for reporting this vulnerability and thank you RafaelGSS for fixing it.
112112
@@ -122,7 +122,7 @@ In the moment of this vulnerability, network permissions (`--allow-net`) are sti
122122
123123Impact:
124124
125- - The issue affects users of the Node.js permission model on version v25 .
125+ - The issue affects users of the Node.js permission model on Node.js 25.x .
126126
127127Thank you, to mufeedvh for reporting this vulnerability and thank you RafaelGSS for fixing it.
128128
@@ -152,7 +152,7 @@ ways that obscure activity, reducing the reliability of logs.
152152
153153Impact:
154154
155- - This vulnerability affects users of the permission model on Node.js v20, v22, v24 , and v25 .
155+ - This vulnerability affects users of the permission model on Node.js 20.x, 22.x, 24.x , and 25.x .
156156
157157Thank you, to oriotie for reporting this vulnerability and thank you RafaelGSS for fixing it.
158158
@@ -165,7 +165,7 @@ Thank you, to oriotie for reporting this vulnerability and thank you RafaelGSS f
165165
166166# Summary
167167
168- The Node.js project will release new versions of the 25.x, 24.x, 22.x, 20.x
168+ The Node.js project will release new versions of the 25.x, 24.x, 22.x, and 20.x
169169releases lines on or shortly after, Monday, December 15, 2025 in order to address:
170170
171171- 3 high severity issues.
0 commit comments