Node v17.3.0 (Current)

Notable changes OpenSSL-3.0.1 OpenSSL-3.0.1 contains a fix for CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl (Moderate). This is a vulnerability in OpenSSL that may be exploited through Node.js. More information can be read here: https://www.openssl.org/news/secadv/20211214.txt. Contributed by Richard Read more…

Node v12.22.8 (LTS)

Notable Changes This release contains a c-ares update to fix a regression introduced in Node.js 12.22.5 resolving CNAME records containing underscores #39780. Root certificates have been updated to those from Mozilla’s Network Security Services 3.71 #40281. Commits [ 12d42295d2a ] Read more…

Security

#​417 — December 9, 2021 Read on the Web Node Weekly GitHub Rolling Out Enforced 2FA and More for npm Registry — Many public code package registries have suffered issues with user security in recent years, and a single compromised Read more…

Node v16.13.1 (LTS)

Notable Changes [ 1c14eb2325d ] – deps: upgrade npm to 8.1.2 (npm team) #40643 [ 1a901b6c53c ] – deps: update c-ares to 1.18.1 (Richard Lau) #40660 This release contains a c-ares update to fix a regression introduced in Node.js v16.6.2 Read more…

Node v17.2.0 (Current)

Notable Changes [ 106916490af ] – (SEMVER-MINOR) async_hooks: expose async_wrap providers (Rafael Gonzaga) #40760 [ 1371ee64c92 ] – (SEMVER-MINOR) deps: update V8 to 9.6.180.14 (Michaël Zasso) #40488 [ 1675c210b04 ] – (SEMVER-MINOR) lib: add reason to AbortSignal (James M Snell) Read more…

Node v14.18.2 (LTS)

Notable changes This release contains a c-ares update to fix a regression introduced in Node.js 14.17.5 resolving CNAME records containing underscores #39780. Also included are commits to allow Node.js 14 to continue to build and pass tests on our Jenkins Read more…