|
| 1 | +--- |
| 2 | +date: '2026-01-13T14:18:09.314Z' |
| 3 | +category: release |
| 4 | +title: Node.js 22.22.0 (LTS) |
| 5 | +layout: blog-post |
| 6 | +author: Marco Ippolito |
| 7 | +--- |
| 8 | + |
| 9 | +## 2026-01-13, Version 22.22.0 'Jod' (LTS), @marco-ippolito |
| 10 | + |
| 11 | +This is a security release. |
| 12 | + |
| 13 | +### Notable Changes |
| 14 | + |
| 15 | +lib: |
| 16 | + |
| 17 | +- (CVE-2025-59465) add TLSSocket default error handler |
| 18 | +- (CVE-2025-55132) disable futimes when permission model is enabled |
| 19 | + lib,permission: |
| 20 | +- (CVE-2025-55130) require full read and write to symlink APIs |
| 21 | + src: |
| 22 | +- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks |
| 23 | + src,lib: |
| 24 | +- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle |
| 25 | + tls: |
| 26 | +- (CVE-2026-21637) route callback exceptions through error handlers |
| 27 | + |
| 28 | +### Commits |
| 29 | + |
| 30 | +- \[[`6badf4e6f4`](https://github.com/nodejs/node/commit/6badf4e6f4)] - **deps**: update c-ares to v1.34.6 (Node.js GitHub Bot) [#60997](https://github.com/nodejs/node/pull/60997) |
| 31 | +- \[[`37509c3ff0`](https://github.com/nodejs/node/commit/37509c3ff0)] - **deps**: update undici to 6.23.0 (Matteo Collina) [nodejs-private/node-private#791](https://github.com/nodejs-private/node-private/pull/791) |
| 32 | +- \[[`eb8e41f8db`](https://github.com/nodejs/node/commit/eb8e41f8db)] - **(CVE-2025-59465)** **lib**: add TLSSocket default error handler (RafaelGSS) [nodejs-private/node-private#797](https://github.com/nodejs-private/node-private/pull/797) |
| 33 | +- \[[`ebbf942a83`](https://github.com/nodejs/node/commit/ebbf942a83)] - **(CVE-2025-55132)** **lib**: disable futimes when permission model is enabled (RafaelGSS) [nodejs-private/node-private#748](https://github.com/nodejs-private/node-private/pull/748) |
| 34 | +- \[[`6b4849583a`](https://github.com/nodejs/node/commit/6b4849583a)] - **(CVE-2025-55130)** **lib,permission**: require full read and write to symlink APIs (RafaelGSS) [nodejs-private/node-private#760](https://github.com/nodejs-private/node-private/pull/760) |
| 35 | +- \[[`ddadc31f09`](https://github.com/nodejs/node/commit/ddadc31f09)] - **(CVE-2025-59466)** **src**: rethrow stack overflow exceptions in async_hooks (Matteo Collina) [nodejs-private/node-private#773](https://github.com/nodejs-private/node-private/pull/773) |
| 36 | +- \[[`d4d9f3915f`](https://github.com/nodejs/node/commit/d4d9f3915f)] - **(CVE-2025-55131)** **src,lib**: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) [nodejs-private/node-private#759](https://github.com/nodejs-private/node-private/pull/759) |
| 37 | +- \[[`25d6799df6`](https://github.com/nodejs/node/commit/25d6799df6)] - **(CVE-2026-21637)** **tls**: route callback exceptions through error handlers (Matteo Collina) [nodejs-private/node-private#796](https://github.com/nodejs-private/node-private/pull/796) |
| 38 | + |
| 39 | +Windows 32-bit Installer: https://nodejs.org/dist/v22.22.0/node-v22.22.0-x86.msi \ |
| 40 | +Windows 64-bit Installer: https://nodejs.org/dist/v22.22.0/node-v22.22.0-x64.msi \ |
| 41 | +Windows ARM 64-bit Installer: https://nodejs.org/dist/v22.22.0/node-v22.22.0-arm64.msi \ |
| 42 | +Windows 32-bit Binary: https://nodejs.org/dist/v22.22.0/win-x86/node.exe \ |
| 43 | +Windows 64-bit Binary: https://nodejs.org/dist/v22.22.0/win-x64/node.exe \ |
| 44 | +Windows ARM 64-bit Binary: https://nodejs.org/dist/v22.22.0/win-arm64/node.exe \ |
| 45 | +macOS 64-bit Installer: https://nodejs.org/dist/v22.22.0/node-v22.22.0.pkg \ |
| 46 | +macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-darwin-arm64.tar.gz \ |
| 47 | +macOS Intel 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-darwin-x64.tar.gz \ |
| 48 | +Linux 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-x64.tar.xz \ |
| 49 | +Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-ppc64le.tar.xz \ |
| 50 | +Linux s390x 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-s390x.tar.xz \ |
| 51 | +AIX 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-aix-ppc64.tar.gz \ |
| 52 | +ARMv7 32-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-armv7l.tar.xz \ |
| 53 | +ARMv8 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-arm64.tar.xz \ |
| 54 | +Source Code: https://nodejs.org/dist/v22.22.0/node-v22.22.0.tar.gz \ |
| 55 | +Other release files: https://nodejs.org/dist/v22.22.0/ \ |
| 56 | +Documentation: https://nodejs.org/docs/v22.22.0/api/ |
| 57 | + |
| 58 | +### SHASUMS |
| 59 | + |
| 60 | +``` |
| 61 | +-----BEGIN PGP SIGNED MESSAGE----- |
| 62 | +Hash: SHA256 |
| 63 | +
|
| 64 | +b5ab6deeb8d54b9738039a8ffdc4781cc4b81b291e79b20d3600f830d1d669cb node-v22.22.0-aix-ppc64.tar.gz |
| 65 | +26b66be5f735426dce7355d629246f704be08b377f3382de293a6513676cf051 node-v22.22.0-arm64.msi |
| 66 | +5ed4db0fcf1eaf84d91ad12462631d73bf4576c1377e192d222e48026a902640 node-v22.22.0-darwin-arm64.tar.gz |
| 67 | +2bd596bbfc4a275ceb8721a5954ee97daea5ebe673e96a185ebd732f6fb023ac node-v22.22.0-darwin-arm64.tar.xz |
| 68 | +5ea50c9d6dea3dfa3abb66b2656f7a4e1c8cef23432b558d45fb538c7b5dedce node-v22.22.0-darwin-x64.tar.gz |
| 69 | +48bc437e00e0c1483da34c21dca196efcb8d22e5dcb0bc7c65386afb00fabb85 node-v22.22.0-darwin-x64.tar.xz |
| 70 | +670494f0cc674059596222c60e5db84fbe80c849d7ffb1c3fbd20e4f55b8ea85 node-v22.22.0-headers.tar.gz |
| 71 | +58e1483493244a4f8aa7d21ad8b21fc4f72cc3ca669fdf292089cad9de221fde node-v22.22.0-headers.tar.xz |
| 72 | +25ba95dfb96871fa2ef977f11f95ea90818c8fa15c0f2110771db08d4ba423be node-v22.22.0-linux-arm64.tar.gz |
| 73 | +1bf1eb9ee63ffc4e5d324c0b9b62cf4a289f44332dfef9607cea1a0d9596ba6f node-v22.22.0-linux-arm64.tar.xz |
| 74 | +a92684d8720589f19776fb186c5a3a4d273c13436fc8c44b61dd3eeef81f0d3a node-v22.22.0-linux-armv7l.tar.gz |
| 75 | +a8b4f15f6e1f371422f1f7abcca4c46bd7abc1c732c274bc5cb108b841c1f0ff node-v22.22.0-linux-armv7l.tar.xz |
| 76 | +54680eec598330b9863ab37ada46456415b776e46345958476fcd2212abdf0f3 node-v22.22.0-linux-ppc64le.tar.gz |
| 77 | +d83b9957431cc18e1fc143a4b99f89cde7b8a18f53ef392231b4336afd058865 node-v22.22.0-linux-ppc64le.tar.xz |
| 78 | +9b24cc6dd17106725d79645adf0a3b62fa3310e4d30aa11147dd3fe2d8325ef4 node-v22.22.0-linux-s390x.tar.gz |
| 79 | +5aa0e520689448c4233e8d73f284e8e0634fdcd32b479735698494be5641f3e4 node-v22.22.0-linux-s390x.tar.xz |
| 80 | +c33c39ed9c80deddde77c960d00119918b9e352426fd604ba41638d6526a4744 node-v22.22.0-linux-x64.tar.gz |
| 81 | +9aa8e9d2298ab68c600bd6fb86a6c13bce11a4eca1ba9b39d79fa021755d7c37 node-v22.22.0-linux-x64.tar.xz |
| 82 | +0e437be47d67d916c2b94073321dfdaffef85ef6e527d509588d00994e9036af node-v22.22.0.pkg |
| 83 | +5a4585d7f26bfb283267194b299243efea5ee6edd2fbf887825469b4ac94aece node-v22.22.0.tar.gz |
| 84 | +4c138012bb5352f49822a8f3e6d1db71e00639d0c36d5b6756f91e4c6f30b683 node-v22.22.0.tar.xz |
| 85 | +31bad2fed05553bd4709851e5269ec953c744ee5845d2962564f37fcff634a53 node-v22.22.0-win-arm64.7z |
| 86 | +5b44fd410df7b4cd0a1891a05a7b606f8fb7d8786a94997b996a372e82478d7a node-v22.22.0-win-arm64.zip |
| 87 | +98758c6ec0b29a03b4e1ec0ace7671a8ac57839034d23a1a62e91fc782fb97d2 node-v22.22.0-win-x64.7z |
| 88 | +c97fa376d2becdc8863fcd3ca2dd9a83a9f3468ee7ccf7a6d076ec66a645c77a node-v22.22.0-win-x64.zip |
| 89 | +3cf831dc2ae1a53da6baee772388b7cd5635617c8a133fbaf92269fde3336686 node-v22.22.0-win-x86.7z |
| 90 | +5d7f6cfc50474cf784027ce9ddabf47a0198ea4b588301ab8675de8c56217247 node-v22.22.0-win-x86.zip |
| 91 | +b10f88c6ded24ca487839b3eccb8870a08d7f9fc2b9bb3b463fc72a3a40bcdb1 node-v22.22.0-x64.msi |
| 92 | +ec3eeb357dbb980aea936afb8ce8b279f12cf0bec03fd7781ddcfad44f01cba6 node-v22.22.0-x86.msi |
| 93 | +fd44256121597d6a3707f4c7730b4e3733eacb5a95cc78a099f601d7e7f8290d win-arm64/node.exe |
| 94 | +48839df5eda1889bf704353d35699a4b0d379ee3b2c87d9bfdf0d2d22b182c18 win-arm64/node.lib |
| 95 | +8497008940246b148cf9e4455568adbc1a4d5b71f52ebd236dc4f90e5f30142d win-arm64/node_pdb.7z |
| 96 | +ded8b2b2c37f93017d8d565f4b32db5278283d3d9527803008ee1aa282c3a084 win-arm64/node_pdb.zip |
| 97 | +bae898add4643fcf890a83ad8ae56e20dce7e781cab161a53991ceba70c99ffb win-x64/node.exe |
| 98 | +29b1f8c74cb600ff522dcb9da5807c752fae6f510868b7f3079851ebf27154ea win-x64/node.lib |
| 99 | +549027ada17424c185a545cf09b3fad7a1d769777ec587481cefe694447728c6 win-x64/node_pdb.7z |
| 100 | +1b3fad691fc6f0c1bf679e5999de3d4e16a506e54e404e7e5f9459c9e1e9e1cb win-x64/node_pdb.zip |
| 101 | +65fff00e7d40f9a7fc7fb7a64e0d3a595adb6807eeafc8ed8477850eedc90e68 win-x86/node.exe |
| 102 | +03c89ca02b018a620471a8411881ab90f472b9e88e5b150cf58b075afb7ce2e9 win-x86/node.lib |
| 103 | +fc2cd7abd2c3ee99de42b16bb86e1ecf4fed6d87b714d4827f1e26c4a7e17e51 win-x86/node_pdb.7z |
| 104 | +28561a9939829dc3d32ac6b6bc478a1614fbe3992657ab45d1926a0007c2e8fd win-x86/node_pdb.zip |
| 105 | +-----BEGIN PGP SIGNATURE----- |
| 106 | +
|
| 107 | +iQIzBAEBCAAdFiEEzGj1oxBv9EgyLkjtJ/XjjVsKIV8FAmlmTlkACgkQJ/XjjVsK |
| 108 | +IV8/DRAAoFQH3kAks0aVWHG0/v8+rdRbWiIJxNffnfeudYYCm7xcz9JKHo+NhjyY |
| 109 | +LQCqoaZUnCo7HJa0y3UypKHC0Jho2WdueyfW6/U/e5wpGt38N4UMaz8tbAGBk48Y |
| 110 | +72esD5RnYwA1JEGTtO6JIY8tcLC4NwIMT81WIQaTsGEKtNcJpu8F9AvQGxe0TKuT |
| 111 | +RGIcT6IKRuIU0heRYdbmQ85jK9p/pukGdlMoz5/DSDDYQnE3ZRyokdXsnyPn3xx6 |
| 112 | +2OEfEL+bjzyDj76zBLuZJSL4Dzm8UC43YTcZHFXKUHyyKNNx9lIOd/LD9Xzujkr4 |
| 113 | +HZT4VhOJqQYZuEaVNTapDZzUe2LCoLH+iHmAndUyWL5w94yf6C9/M5hCSfKdVWQV |
| 114 | +L4B453tDc1SI7m1GaQlngBb7bfL/b4dKQeoOrwDCqp8nYkg41CMN+FnJ74fzxNEn |
| 115 | +in2HIDEfcEWhs+5aQr+ITH29c0V5jufrsnle0I82FQ93BZ9JVLq1WTe5xgrp9wjU |
| 116 | +zNM4v7BuBRMQP0qSv1mc3xuwu1Wr837NhTZh+vjYI++DhkL5GTUJ6MH2R3m58+Hg |
| 117 | +kcyXQet+YEs8cFbs12Tq47KMsn9rTsOfksubyLJxxz/XRRkgv6HE0m9c5jlbF+uV |
| 118 | +gZJILw7c8UopZWoVtuRaZxFFQCipWUcT+NBENDUZnetaHN7KuQo= |
| 119 | +=vkw+ |
| 120 | +-----END PGP SIGNATURE----- |
| 121 | +``` |
0 commit comments