- Fixed multiple high‑severity security vulnerabilities (CVE‑2024‑21892, 22019, 21896, 22017, etc.) including code injection, privilege escalation, DoS, and path‑traversal bugs
- Updated OpenSSL to 3.0.13+quic1, libuv, and undici to v5.28.3; disabled PKCS#1 padding for privateDecrypt and io_uring support by default
- Added mitigations such as max chunk‑extension size, improved wildcard handling, and cache‑based FS internals protection against buffer tampering
2024-02-14, Version 20.11.1 'Iron' (LTS), @RafaelGSS prepared by @marco-ippolito
Official Node.js changelog summary with source attribution, release tags, and community reactions.
Track this Node.js release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
More Node.js changelog updates
Introduced numerous new APIs and enhancements: caller‑supplied readFile buffers, synchronous dgram connect/bind, TCP KEEPINTVL/KEEPCNT in net.setKeepAlive, TLS certificateCompression option, HTTP idle‑socket cleanup, loader package maps,...
Community impact
Community ratings: 0 Useful, 0 Noise, 0 Risky, 0 Broke, 0 Try.