|
| 1 | +--- |
| 2 | +date: 2025-05-08T03:00:00.000Z |
| 3 | +category: vulnerability |
| 4 | +title: Wednesday, May 14, 2025 Security Releases |
| 5 | +slug: may-2025-security-releases |
| 6 | +layout: blog-post |
| 7 | +author: The Node.js Project |
| 8 | +--- |
| 9 | + |
| 10 | +# Summary |
| 11 | + |
| 12 | +The Node.js project will release new versions of the 24.x, 23.x, 22.x, 20.x |
| 13 | +releases lines on or shortly after, Wednesday, May 14, 2025 in order to address: |
| 14 | + |
| 15 | +- 1 low severity issues. |
| 16 | +- 1 high severity issues. |
| 17 | +- 1 medium severity issues. |
| 18 | + |
| 19 | +## Impact |
| 20 | + |
| 21 | +The 24.x release line of Node.js is vulnerable to 1 high severity issues. |
| 22 | +The 23.x release line of Node.js is vulnerable to 1 high severity issues. |
| 23 | +The 22.x release line of Node.js is vulnerable to 1 low severity issues, 1 high severity issues. |
| 24 | +The 20.x release line of Node.js is vulnerable to 1 low severity issues, 1 high severity issues, 1 medium severity issues. |
| 25 | + |
| 26 | +It's important to note that End-of-Life versions are always affected when a security release occurs. |
| 27 | +To ensure your system's security, please use an up-to-date version as outlined in our |
| 28 | +[Release Schedule](https://github.com/nodejs/release#release-schedule). |
| 29 | + |
| 30 | +## Release timing |
| 31 | + |
| 32 | +Releases will be available on, or shortly after, Wednesday, May 14, 2025. |
| 33 | + |
| 34 | +## Contact and future updates |
| 35 | + |
| 36 | +The current Node.js security policy can be found at <https://nodejs.org/en/security/>. |
| 37 | +Please follow the process outlined in <https://github.com/nodejs/node/blob/master/SECURITY.md> if you wish to report a vulnerability in Node.js. |
| 38 | + |
| 39 | +Subscribe to the low-volume announcement-only nodejs-sec mailing list at <https://groups.google.com/forum/#!forum/nodejs-sec> to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization. |
0 commit comments