7 new Node.js vulnerabilities, 0 things for you to do
On October 21, the Node.js project released security fixes for all supported versions (22, 24 and 26), covering 7 vulnerabilities, four of them rated high severity. We’re installing the patched versions across our hosting platform and will restart your Node.js application once the update reaches your account. You don’t need to do anything.
In short:
What happened: Node.js fixed 7 security flaws, the most serious in how it unpacks compressed data. Only a patched Node.js fixes them.
What we know: The most serious flaw can’t be triggered by website visitors and has no known…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.