From 027dd1d396f1f4f943d33876f2812691367f14dc Mon Sep 17 00:00:00 2001 From: RafaelGSS Date: Tue, 8 Jul 2025 11:55:53 -0300 Subject: [PATCH 1/2] Blog: add security release announcement Refs: https://github.com/nodejs-private/security-release/pull/62 --- .../july-2025-security-releases.md | 36 +++++++++++++++++++ apps/site/site.json | 8 ++--- 2 files changed, 40 insertions(+), 4 deletions(-) create mode 100644 apps/site/pages/en/blog/vulnerability/july-2025-security-releases.md diff --git a/apps/site/pages/en/blog/vulnerability/july-2025-security-releases.md b/apps/site/pages/en/blog/vulnerability/july-2025-security-releases.md new file mode 100644 index 0000000000000..b25b2244498fc --- /dev/null +++ b/apps/site/pages/en/blog/vulnerability/july-2025-security-releases.md @@ -0,0 +1,36 @@ +--- +date: 2025-07-08T03:00:00.000Z +category: vulnerability +title: Monday, July 14, 2025 Security Releases +slug: july-2025-security-releases +layout: blog-post +author: The Node.js Project +--- + +# Summary + +The Node.js project will release new versions of the 24.x, 22.x, 20.x +releases lines on or shortly after, Monday, July 14, 2025 in order to address: + +- 2 high severity issues. + +## Impact + +The 24.x release line of Node.js is vulnerable to 2 high severity issues. +The 22.x release line of Node.js is vulnerable to 1 high severity issues. +The 20.x release line of Node.js is vulnerable to 1 high severity issues. + +It's important to note that End-of-Life versions are always affected when a security release occurs. +To ensure your system's security, please use an up-to-date version as outlined in our +[Release Schedule](https://github.com/nodejs/release#release-schedule). + +## Release timing + +Releases will be available on, or shortly after, Monday, July 14, 2025. + +## Contact and future updates + +The current Node.js security policy can be found at . +Please follow the process outlined in if you wish to report a vulnerability in Node.js. + +Subscribe to the low-volume announcement-only nodejs-sec mailing list at to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization. diff --git a/apps/site/site.json b/apps/site/site.json index 919c132a3e00b..f8f45946e9191 100644 --- a/apps/site/site.json +++ b/apps/site/site.json @@ -28,10 +28,10 @@ ], "websiteBanners": { "index": { - "startDate": "2025-05-14T03:00:00.000Z", - "endDate": "2025-05-21T03:00:00.000Z", - "text": "May Security Release is available", - "link": "https://nodejs.org/en/blog/vulnerability/may-2025-security-releases", + "startDate": "2025-07-08T03:00:00.000Z", + "endDate": "2025-07-15T03:00:00.000Z", + "text": "New security releases to be made available Monday, July 14, 2025", + "link": "https://nodejs.org/en/blog/vulnerability/july-2025-security-releases", "type": "warning" } }, From d4202f7b889dd8b5941b03eae87a7b69a0ba62f5 Mon Sep 17 00:00:00 2001 From: RafaelGSS Date: Tue, 8 Jul 2025 12:00:06 -0300 Subject: [PATCH 2/2] fixup! Blog: add security release announcement --- .../en/blog/vulnerability/july-2025-security-releases.md | 6 +++--- apps/site/site.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/apps/site/pages/en/blog/vulnerability/july-2025-security-releases.md b/apps/site/pages/en/blog/vulnerability/july-2025-security-releases.md index b25b2244498fc..3ed74d345f5a6 100644 --- a/apps/site/pages/en/blog/vulnerability/july-2025-security-releases.md +++ b/apps/site/pages/en/blog/vulnerability/july-2025-security-releases.md @@ -1,7 +1,7 @@ --- date: 2025-07-08T03:00:00.000Z category: vulnerability -title: Monday, July 14, 2025 Security Releases +title: Tuesday, July 15, 2025 Security Releases slug: july-2025-security-releases layout: blog-post author: The Node.js Project @@ -10,7 +10,7 @@ author: The Node.js Project # Summary The Node.js project will release new versions of the 24.x, 22.x, 20.x -releases lines on or shortly after, Monday, July 14, 2025 in order to address: +releases lines on or shortly after, Tuesday, July 15, 2025 in order to address: - 2 high severity issues. @@ -26,7 +26,7 @@ To ensure your system's security, please use an up-to-date version as outlined i ## Release timing -Releases will be available on, or shortly after, Monday, July 14, 2025. +Releases will be available on, or shortly after, Tuesday, July 15, 2025. ## Contact and future updates diff --git a/apps/site/site.json b/apps/site/site.json index f8f45946e9191..3cd0f99094fe2 100644 --- a/apps/site/site.json +++ b/apps/site/site.json @@ -30,7 +30,7 @@ "index": { "startDate": "2025-07-08T03:00:00.000Z", "endDate": "2025-07-15T03:00:00.000Z", - "text": "New security releases to be made available Monday, July 14, 2025", + "text": "New security releases to be made available Tuesday, July 15, 2025", "link": "https://nodejs.org/en/blog/vulnerability/july-2025-security-releases", "type": "warning" }