Node.js v24.0.2, v23.11.1 and v22.15.1 released!

[NewsBot]

Node.js v24.0.2, v23.11.1 and v22.15.1 has been released.

This is a security release.

Notable Changes

• (CVE-2025-23166) fix error handling on async crypto operation

Commits

• [7d0c17b2ad] - (CVE-2025-23166) src: fix error handling on async crypto operations (RafaelGSS) nodejs-private/node-private#688

Link: Release 2025-05-14, Version 24.0.2 (Current), @RafaelGSS · nodejs/node · GitHub

This is a security release.

Notable Changes

src:

• (CVE-2025-23166) fix error handling on async crypto operation

Commits

• [a271810ce2] - deps: update c-ares to v1.34.5 (Node.js GitHub Bot) #57792
• [a12107f0dd] - (CVE-2025-23166) src: fix error handling on async crypto operations (RafaelGSS) nodejs-private/node-private#688

Link: Release 2025-05-14, Version 23.11.1 (Current), @RafaelGSS · nodejs/node · GitHub

This is a security release.

Notable Changes

• (CVE-2025-23166) fix error handling on async crypto operation
• (CVE-2025-23165) add missing call to uv_fs_req_cleanup

Commits

• [edaf54da00] - fs: added test for missing call to uv_fs_req_cleanup (Justin Nietzel) #57811
• [9f403e98ef] - (CVE-2025-23165) fs: add missing call to uv_fs_req_cleanup (Justin Nietzel) #57811
• [f4494d38f1] - (CVE-2025-23166) src: fix error handling on async crypto operations (RafaelGSS) nodejs-private/node-private#709

Link: Release 2025-05-14, Version 22.15.1 'Jod' (LTS), @RafaelGSS · nodejs/node · GitHub