Node.js / update detail

2022-01-10, Version 17.3.1 (Current), @BethGriggs

Official Node.js changelog summary with source attribution, release tags, and community reactions.

Track this Node.js release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Node.js·4 years ago · Jan 11, 2022, 12:49 AMFixSecurity-relevantAI-assisted summary

2022-01-10, Version 17.3.1 (Current), @BethGriggs

Summary

Fixed improper handling of URI Subject Alternative Names to prevent certificate verification bypass (CVE‑2021‑44531).
Patched SAN string injection and multi‑value Relative Distinguished Name handling, closing hostname verification bypasses (CVE‑2021‑44532, CVE‑2021‑44533).
Mitigated prototype pollution in console.table by using a null prototype (CVE‑2022‑21824).

Community impact

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 14 hours ago

Official changelog

related updates

More Node.js changelog updates

Product page

Node.js·2 weeks agoFeatureSecurity-relevant

2026-06-24, Version 26.4.0 (Current), @aduh95

Summary

Introduced numerous new APIs and enhancements: caller‑supplied readFile buffers, synchronous dgram connect/bind, TCP KEEPINTVL/KEEPCNT in net.setKeepAlive, TLS certificateCompression option, HTTP idle‑socket cleanup, loader package maps,...

2022-01-10, Version 17.3.1 (Current), @BethGriggs

2022-01-10, Version 17.3.1 (Current), @BethGriggs

Community impact

Verify the original release note

More Node.js changelog updates

2026-06-24, Version 26.4.0 (Current), @aduh95

Community impact

2026-06-23, Version 24.18.0 'Krypton' (LTS), @richardlau prepared by @sxa

Community impact

2026-06-23, Version 22.23.1 'Jod' (LTS), @RafaelGSS

Community impact