Node.js / update detail

2021-07-01, Version 14.17.2 'Fermium' (LTS), @richardlau

Official Node.js changelog summary with source attribution, release tags, and community reactions.

Track this Node.js release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Node.js·5 years ago · Jul 1, 2021, 03:41 PMChangeSecurity-relevantAI-assisted summary

2021-07-01, Version 14.17.2 'Fermium' (LTS), @richardlau

Summary

Patched libuv to fix an out-of-bounds read vulnerability (CVE‑2021‑22918) affecting Node's dns.lookup().
Adjusted Windows installer directory permissions to prevent local privilege escalation (CVE‑2021‑22921) via PATH/DLL hijacking.
Included upstream cherry‑pick of uv security fix and installer hardening commits.

Community impact

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 14 hours ago

Official changelog

related updates

More Node.js changelog updates

Product page

Node.js·2 weeks agoFeatureSecurity-relevant

2026-06-24, Version 26.4.0 (Current), @aduh95

Summary

Introduced numerous new APIs and enhancements: caller‑supplied readFile buffers, synchronous dgram connect/bind, TCP KEEPINTVL/KEEPCNT in net.setKeepAlive, TLS certificateCompression option, HTTP idle‑socket cleanup, loader package maps,...

2021-07-01, Version 14.17.2 'Fermium' (LTS), @richardlau

2021-07-01, Version 14.17.2 'Fermium' (LTS), @richardlau

Community impact

Verify the original release note

More Node.js changelog updates

2026-06-24, Version 26.4.0 (Current), @aduh95

Community impact

2026-06-23, Version 24.18.0 'Krypton' (LTS), @richardlau prepared by @sxa

Community impact

2026-06-23, Version 22.23.1 'Jod' (LTS), @RafaelGSS

Community impact