Node v18.10.0 (Current)

Notable changes doc: (SEMVER-MINOR) deprecate modp1, modp2, and modp5 groups (Tobias Nießen) #44588 add legendecas to TSC list (Michael Dawson) #44662 move 1policy docs to the 1permissions scope (Rafael Gonzaga) #44222 gyp: libnode for ios app embedding (chexiongsheng) #44210 http: Read more…

Node v18.9.1 (Current)

Notable changes The following CVEs are fixed in this release: CVE-2022-32212: DNS rebinding in –inspect on macOS (High) Insufficient fix for macOS devices on v18.5.0 CVE-2022-32222: Node 18 reads openssl.cnf from /home/iojs/build/ upon startup on MacOS (Medium) CVE-2022-32213: HTTP Request Read more…

Node v14.20.1 (LTS)

Notable changes The following CVEs are fixed in this release: CVE-2022-32212: DNS rebinding in –inspect on macOS (High) CVE-2022-32213: bypass via obs-fold mechanic (Medium) CVE-2022-35256: HTTP Request Smuggling Due to Incorrect Parsing of Header Fields (Medium) More detailed information on Read more…

Node v16.17.1 (LTS)

This is a security release. Notable changes The following CVEs are fixed in this release: CVE-2022-32212: DNS rebinding in –inspect on macOS (High) CVE-2022-32213: bypass via obs-fold mechanic (Medium) CVE-2022-35255: Weak randomness in WebCrypto keygen CVE-2022-35256: HTTP Request Smuggling – Read more…

Node v18.9.0 (Current)

Notable changes doc add daeyeon to collaborators (Daeyeon Jeong) #44355 lib (SEMVER-MINOR) add diagnostics channel for process and worker (theanarkh) #44045 os (SEMVER-MINOR) add machine method (theanarkh) #44416 report (SEMVER-MINOR) expose report public native apis (Chengzhong Wu) #44255 src (SEMVER-MINOR) Read more…