Node.js / update detail

2021-02-23, Version 12.21.0 'Erbium' (LTS), @richardlau

Official Node.js changelog summary with source attribution, release tags, and community reactions.

Track this Node.js release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Node.js·5 years ago · Feb 23, 2021, 01:08 PMFixSecurity-relevantAI-assisted summary

2021-02-23, Version 12.21.0 'Erbium' (LTS), @richardlau

Summary

Patched CVE‑2021‑22883 (HTTP/2 unknownProtocol DoS), CVE‑2021‑22884 (inspector DNS rebinding), and CVE‑2021‑23840 (OpenSSL integer overflow).
Updated OpenSSL to 1.1.1j and added an unknownProtocol timeout in the HTTP/2 implementation.
Removed "localhost6" from the inspector whitelist, strengthening DNS rebinding protections.

Community impact

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 14 hours ago

Official changelog

related updates

More Node.js changelog updates

Product page

Node.js·2 weeks agoFeatureSecurity-relevant

2026-06-24, Version 26.4.0 (Current), @aduh95

Summary

Introduced numerous new APIs and enhancements: caller‑supplied readFile buffers, synchronous dgram connect/bind, TCP KEEPINTVL/KEEPCNT in net.setKeepAlive, TLS certificateCompression option, HTTP idle‑socket cleanup, loader package maps,...

2021-02-23, Version 12.21.0 'Erbium' (LTS), @richardlau

2021-02-23, Version 12.21.0 'Erbium' (LTS), @richardlau

Community impact

Verify the original release note

More Node.js changelog updates

2026-06-24, Version 26.4.0 (Current), @aduh95

Community impact

2026-06-23, Version 24.18.0 'Krypton' (LTS), @richardlau prepared by @sxa

Community impact

2026-06-23, Version 22.23.1 'Jod' (LTS), @RafaelGSS

Community impact