Node.js to release security patches for 26.x, 24.x and 22.x lines on November 11, fixing a high-severity issue

The Node.js project will ship security updates for its 26.x, 24.x, and 22.x release lines on or shortly after Wednesday, November 11, 2026. Each of the three lines addresses an issue rated HIGH severity, the highest severity fixed in the release. The announcement notes that End-of-Life versions are always affected when a security release occurs, and users are advised to run an up-to-date version per the project's Release Schedule. Vulnerability reports can be submitted via the process in the project's SECURITY.md, and users can follow the low-volume, announcement-only nodejs-sec mailing list for future security updates. The current security policy is available on the Node.js website.

✨ AI summary of the linked source — not editorial content.

Explore the topic

• Release