ByteWire

Computing - release desk

A source-linked snapshot of Node.js releases for builders. Source excerpts are shortened; consult the release notes before changing a system.

• 012026-10-21, Version 26.12.1 (Current), @aduh95 prepared by @RafaelGSS

  This is a security release. Notable Changes (CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina) - High (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) - High (CVE-2026-105483) tls: fix ip…

  Source: Node.js release notesSource date: 2026-10-21 10:38:29 UTC
• 022026-10-21, Version 24.22.1 'Krypton' (LTS), @aduh95

  This is a security release. Notable Changes (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) (CVE-2026-105483) tls: fix ip normalization regression…

  Source: Node.js release notesSource date: 2026-10-21 10:38:25 UTC
• 032026-10-21, Version 22.23.4 'Jod' (LTS), @aduh95

  This is a security release. Notable Changes (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) (CVE-2026-106069) tls: reject non-canonical IP…

  Source: Node.js release notesSource date: 2026-10-21 10:38:20 UTC

Source-linked digest. Excerpt punctuation is normalized for display.