Node.js / update detail

2022-09-23, Version 16.17.1 'Gallium' (LTS), @ruyadorno

Official Node.js changelog summary with source attribution, release tags, and community reactions.

Track this Node.js release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Node.js·4 years ago · Sep 23, 2022, 04:11 PMFixSecurity-relevantAI-assisted summary

2022-09-23, Version 16.17.1 'Gallium' (LTS), @ruyadorno

Summary

Fixed CVE-2022-32212 (DNS rebinding on macOS), CVE-2022-32213 (OBS fold bypass), CVE-2022-35255 (weak randomness in WebCrypto), and CVE-2022-35256 (HTTP request smuggling).
Patched crypto module to use strong randomness for WebCrypto key generation and disabled chunked encoding when OBS fold is used.
Corrected IPv4 validation to reject non‑routable addresses.

Community impact

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 14 hours ago

Official changelog

related updates

More Node.js changelog updates

Product page

Node.js·2 weeks agoFeatureSecurity-relevant

2026-06-24, Version 26.4.0 (Current), @aduh95

Summary

Introduced numerous new APIs and enhancements: caller‑supplied readFile buffers, synchronous dgram connect/bind, TCP KEEPINTVL/KEEPCNT in net.setKeepAlive, TLS certificateCompression option, HTTP idle‑socket cleanup, loader package maps,...

2022-09-23, Version 16.17.1 'Gallium' (LTS), @ruyadorno

2022-09-23, Version 16.17.1 'Gallium' (LTS), @ruyadorno

Community impact

Verify the original release note

More Node.js changelog updates

2026-06-24, Version 26.4.0 (Current), @aduh95

Community impact

2026-06-23, Version 24.18.0 'Krypton' (LTS), @richardlau prepared by @sxa

Community impact

2026-06-23, Version 22.23.1 'Jod' (LTS), @RafaelGSS

Community impact