Node.js March 2026 Security Release: Fixes 10 CVEs including TLS DoS and Prototype Pollution

nodejs.org 2026-04-02查看中文 →

Security AdvisoryHighNode.js

Affected:

Node.js 20.x
Node.js 22.x
Node.js 24.x
Node.js 25.x
undici 6.x

Fixed in:

Node.js v20.20.2
Node.js v22.22.2
Node.js v24.14.1
Node.js v25.8.2
undici 6.24.1

Referenced CVEs: CVE-2026-21710 CVE-2026-21711 CVE-2026-21715 CVE-2026-21716 CVE-2026-21713 CVE-2026-21714 CVE-2026-21717 CVE-2026-21712

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from nodejs.org, cleaned by our LLM pipeline, and translated to English. View original.

Offline Archive

Offline screenshot & PDF are Pro-exclusive