Skip to content
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 0 additions & 6 deletions apps/site/pages/en/blog/release/v20.20.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,17 +12,11 @@ This is a security release.

### Notable Changes

lib:

- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/802>
- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/797>
lib,permission:
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/760>
src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/773>
src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) <https://github.com/nodejs-private/node-private/pull/759>
tls:
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/796>

### Commits
Expand Down
6 changes: 0 additions & 6 deletions apps/site/pages/en/blog/release/v22.22.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,17 +12,11 @@ This is a security release.

### Notable Changes

lib:

- (CVE-2025-59465) add TLSSocket default error handler
- (CVE-2025-55132) disable futimes when permission model is enabled
lib,permission:
- (CVE-2025-55130) require full read and write to symlink APIs
src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks
src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle
tls:
- (CVE-2026-21637) route callback exceptions through error handlers

### Commits
Expand Down
6 changes: 0 additions & 6 deletions apps/site/pages/en/blog/release/v24.13.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,17 +12,11 @@ This is a security release.

### Notable Changes

lib:

- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/797>
- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/748>
lib,permission:
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/760>
src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/773>
src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) <https://github.com/nodejs-private/node-private/pull/759>
tls:
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/796>

### Commits
Expand Down
6 changes: 0 additions & 6 deletions apps/site/pages/en/blog/release/v25.3.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,18 +12,12 @@ This is a security release.

### Notable Changes

lib:

- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/750>
permission:
- (CVE-2026-21636) add network check on pipe_wrap connect (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/784>
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/760>
- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) <https://github.com/nodejs-private/node-private/pull/748>
src:
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/773>
src,lib:
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) <https://github.com/nodejs-private/node-private/pull/759>
tls:
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) <https://github.com/nodejs-private/node-private/pull/790>

### Commits
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -147,10 +147,10 @@ Thank you, to oriotie for reporting this vulnerability and thank you RafaelGSS f

## Downloads and release details

- [Node.js v20.19.7](/blog/release/v20.19.7/)
- [Node.js v22.21.2](/blog/release/v22.21.2/)
- [Node.js v24.12.1](/blog/release/v24.12.1/)
- [Node.js v25.2.2](/blog/release/v25.2.2/)
- [Node.js 20.19.7](/blog/release/v20.19.7/)
- [Node.js 22.21.2](/blog/release/v22.21.2/)
- [Node.js 24.12.1](/blog/release/v24.12.1/)
- [Node.js 25.2.2](/blog/release/v25.2.2/)

# Summary

Expand Down
Loading