Changes.Watch
Know what changed in your dev stack before it affects you.
Audit your stack →

Node.js changelog digest

Feb 23 - Mar 1, 2026. Useful releases, risky migrations, and noisy updates from the Node.js channel.

No matching updates in this bucket.

Node.js updates in 2026-w09

Imported from changelog source; review and generate a concise summary before publishing.

Fixed a security vulnerability where crafted CRLF sequences in Redis error replies could be used to manipulate data read by a connection.

Fix a vulnerability where CR\r\n sequences could be injected into Redis error replies, allowing data manipulation by a malicious user.

Fix prevents data manipulation by injecting CRLF sequences into Redis error replies

Fixed a security issue where injected CRLF sequences could manipulate data read from Redis error replies.