Node v22.4.1 (Current)
Rafael Gonzaga
2024-07-08, Version 22.4.1 (Current), @RafaelGSS
This is a security release.
Notable Changes
- CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
- CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
- CVE-2024-22018 - fs.lstat bypasses permission model (Low)
- CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
- CVE-2024-37372 - Permission model improperly processes UNC paths (Low)
Commits
- [
110902ff5e] - lib,esm: handle bypass network-import via data: (RafaelGSS) nodejs-private/node-private#522 - [
0a0de3d491] - lib,permission: support fs.lstat (RafaelGSS) - [
93574335ff] - lib,permission: disable fchmod/fchown when pm enabled (RafaelGSS) nodejs-private/node-private#584 - [
09899e6302] - src: handle permissive extension on cmd check (RafaelGSS) nodejs-private/node-private#596 - [
5d9c811634] - src,permission: fix UNC path resolution (RafaelGSS) nodejs-private/node-private#581
Windows 32-bit Installer: https://nodejs.org/dist/v22.4.1/node-v22.4.1-x86.msi
Windows 64-bit Installer: https://nodejs.org/dist/v22.4.1/node-v22.4.1-x64.msi
Windows ARM 64-bit Installer: https://nodejs.org/dist/v22.4.1/node-v22.4.1-arm64.msi
Windows 32-bit Binary: https://nodejs.org/dist/v22.4.1/win-x86/node.exe
Windows 64-bit Binary: https://nodejs.org/dist/v22.4.1/win-x64/node.exe
Windows ARM 64-bit Binary: https://nodejs.org/dist/v22.4.1/win-arm64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v22.4.1/node-v22.4.1.pkg
macOS Apple Silicon 64-bit Binary: Coming soon
macOS Intel 64-bit Binary: https://nodejs.org/dist/v22.4.1/node-v22.4.1-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v22.4.1/node-v22.4.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v22.4.1/node-v22.4.1-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v22.4.1/node-v22.4.1-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v22.4.1/node-v22.4.1-aix-ppc64.tar.gz
ARMv7 32-bit Binary: https://nodejs.org/dist/v22.4.1/node-v22.4.1-linux-armv7l.tar.xz
ARMv8 64-bit Binary: https://nodejs.org/dist/v22.4.1/node-v22.4.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v22.4.1/node-v22.4.1.tar.gz
Other release files: https://nodejs.org/dist/v22.4.1/
Documentation: https://nodejs.org/docs/v22.4.1/api/
SHASUMS
[INSERT SHASUMS HERE]