From daa5c730b3f01ef72c2c1c2c76f9e6862462cff0 Mon Sep 17 00:00:00 2001 From: RafaelGSS Date: Wed, 7 May 2025 12:16:54 -0300 Subject: [PATCH] Blog: pre release announcement May security releases --- .../may-2025-security-releases.md | 39 +++++++++++++++++++ apps/site/site.json | 8 ++-- 2 files changed, 43 insertions(+), 4 deletions(-) create mode 100644 apps/site/pages/en/blog/vulnerability/may-2025-security-releases.md diff --git a/apps/site/pages/en/blog/vulnerability/may-2025-security-releases.md b/apps/site/pages/en/blog/vulnerability/may-2025-security-releases.md new file mode 100644 index 0000000000000..fa6f7a5638c94 --- /dev/null +++ b/apps/site/pages/en/blog/vulnerability/may-2025-security-releases.md @@ -0,0 +1,39 @@ +--- +date: 2025-05-08T03:00:00.000Z +category: vulnerability +title: Wednesday, May 14, 2025 Security Releases +slug: may-2025-security-releases +layout: blog-post +author: The Node.js Project +--- + +# Summary + +The Node.js project will release new versions of the 24.x, 23.x, 22.x, 20.x +releases lines on or shortly after, Wednesday, May 14, 2025 in order to address: + +- 1 low severity issues. +- 1 high severity issues. +- 1 medium severity issues. + +## Impact + +The 24.x release line of Node.js is vulnerable to 1 high severity issues. +The 23.x release line of Node.js is vulnerable to 1 high severity issues. +The 22.x release line of Node.js is vulnerable to 1 low severity issues, 1 high severity issues. +The 20.x release line of Node.js is vulnerable to 1 low severity issues, 1 high severity issues, 1 medium severity issues. + +It's important to note that End-of-Life versions are always affected when a security release occurs. +To ensure your system's security, please use an up-to-date version as outlined in our +[Release Schedule](https://github.com/nodejs/release#release-schedule). + +## Release timing + +Releases will be available on, or shortly after, Wednesday, May 14, 2025. + +## Contact and future updates + +The current Node.js security policy can be found at . +Please follow the process outlined in if you wish to report a vulnerability in Node.js. + +Subscribe to the low-volume announcement-only nodejs-sec mailing list at to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization. diff --git a/apps/site/site.json b/apps/site/site.json index 1d8f5212bcdbf..61d71901a553b 100644 --- a/apps/site/site.json +++ b/apps/site/site.json @@ -28,10 +28,10 @@ ], "websiteBanners": { "index": { - "startDate": "2025-04-01T00:00:00.000Z", - "endDate": "2025-06-01T00:00:00.000Z", - "text": "Node.js v18 has reached End-Of-Life on April 30, 2025.", - "link": "https://nodejs.org/en/about/previous-releases#release-schedule", + "startDate": "2025-05-08T03:00:00.000Z", + "endDate": "2025-05-15T03:00:00.000Z", + "text": "New security releases to be made available Wednesday, May 14, 2025", + "link": "https://nodejs.org/en/blog/vulnerability/may-2025-security-releases", "type": "warning" } },